Dashboards & Visualizations

dashboard single value panel

bharpur183
Explorer

For a dashboard visualization "single Value" it shows the top value either by count or time etc.

Is there a way to have it show multiple items or names ?

For example if a switch breaks down , then all the other machine connected to that switch show up in the single view panel

0 Karma

woodcock
Esteemed Legend

This is kind-of the idea behind ITSI, too.

0 Karma

DalJeanis
Legend

There are two obvious things you can do -

1) You could create a multivalue field and display that. The different values will appear in the single value panel with commas between them. This works, but it's not pretty.

2) You could create two different panels, and use depends and reject to show and hide, respectively, the two potential displays. So, the single-value panel would have code for the token that says depends mytoken and the multiple value display would have code that says reject mytoken. Therefore, whenever token mytoken is defined, the single-value panel will display while the other hides. When there is an error and you want to reverse it, you unset mytoken and the multiple value will display while the other one hides.

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

Have you looked at the new Trellis visualization option? I don't know if it will do what you want, but exactly what you want displayed hasn't been shared.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

The surge in machine data is already hitting enterprise budgets, and the agentic era will only intensify it. ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...