Dashboards & Visualizations

dashboard with two searches each for two panels

Communicator

Hello!
I got a question: everywhere in docs it is supposed that I want to make a whole dashboard run from a single search, but if I want to separate a dashboard into, for example, two hidden searches - what should I use?

0 Karma

Revered Legend

You can try this workaround (not tested)

<form>
 <label>Two Template Search</label>
 <description/>
 <fieldset submitButton="false" autoRun="true">
 <input type="text" token="varFirstSearch" id="field1" searchWhenChanged="true">
  <default>Your First Search Tempate query</default>
 </input>
 <input type="text" token="varSecondSearch" id="field2" searchWhenChanged="true">
 <default>Your Second Search TEmplate query</default>
 </input>
 <html id="field3">
 <body>
 <html>
 <style>.input#field1,.input#field2 { display:none; }</style>
 </html>
 </fieldset>
 <row>
 <table id="master">
  <title>First Search-Table</title>
  <searchString>$varFirstSearch$</searchString>
 </table>
 <chart>
  <title>First Search-Chart</title>
  <searchString>
$varFirstSearch$    
  </searchString>
  <earliestTime>-1w</earliestTime>
  <latestTime>-1d</latestTime>
  <option name="height">200px</option>
  <option name="charting.chart">line</option>
</chart>
<chart>
  <title>Second Search-Chart</title>
  <searchString>
    $varSecondSearch$
  </searchString>
  <earliestTime>-1w</earliestTime>
  <latestTime>-1d</latestTime>
  <option name="height">200px</option>
  <option name="charting.chart">line</option>
</chart>
</row>
</form>
0 Karma

Revered Legend

Nothing that I am aware of in simple xml.

0 Karma

Communicator

Did not try, but it's a workaround. Good, but isn't there any default features?

0 Karma

Communicator

Simple is better.
I have a question about putting search template into the chart - it the same to make just a search ? How does it work?

0 Karma

Revered Legend

Simple Xml or advanced xml? You may wanna look at following post:
http://answers.splunk.com/answers/67358/calling-multiple-search-templates-in-a-form

State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!