Dashboards & Visualizations

dashboard single value panel


For a dashboard visualization "single Value" it shows the top value either by count or time etc.

Is there a way to have it show multiple items or names ?

For example if a switch breaks down , then all the other machine connected to that switch show up in the single view panel

0 Karma

Esteemed Legend

This is kind-of the idea behind ITSI, too.

0 Karma


There are two obvious things you can do -

1) You could create a multivalue field and display that. The different values will appear in the single value panel with commas between them. This works, but it's not pretty.

2) You could create two different panels, and use depends and reject to show and hide, respectively, the two potential displays. So, the single-value panel would have code for the token that says depends mytoken and the multiple value display would have code that says reject mytoken. Therefore, whenever token mytoken is defined, the single-value panel will display while the other hides. When there is an error and you want to reverse it, you unset mytoken and the multiple value will display while the other one hides.

0 Karma


Have you looked at the new Trellis visualization option? I don't know if it will do what you want, but exactly what you want displayed hasn't been shared.

Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...