Dashboards & Visualizations

found an invalid value for layoutPanel

gnovak
Builder

After I added a drop down menu to my dashboard, I started to receive this error. My second row of single values doesn't appear to be working correctly now and I'm not sure what the cause is.

Originally in this code, i started the code at the very top of the file with <dashboard> and ended the code at the very bottom with </dashboard>. However after I added the drop down menu, I removed the dashboard and now the code start at the top with <form> and ends at the bottom with </form>. I'm not sure if this is relevant but thought I would throw it in there.

either way i can't get my single value searches to work correctly any more. I'm wondering do I now have to add modules to the code? Do I need to add a value somewhere that I'm missing? Here is the code for the entire page. Once the code gets to the row grouping, i believe something is wrong. The error i receive is "found an invalid value for layoutPanel - 'panel_row2_col4'."

Any ideas? I'm still playing around with this trying to figure it out.

<form>
    <label>Balance Email Summary - Last 24 Hours</label>
    <fieldset autoRun="true" submitButton="false">
    <input type="time" searchWhenChanged="true" />
    <default>Last 7 days</default>
    </fieldset>

    <row>  
    <chart>
     <title>Total Emails For All Registries</title>
     <searchTemplate><![CDATA[ sourcetype="cron_BalanceEmail" (source="*asia*" OR source="*info*" OR source="*org*") BalanceEmail sent | rex field=_raw "\[BalanceEmail\] ?(?<TotalEmailsSent>[\d]+) of (?<TotalEmailsToSend>[\d]+) of email notification sent\." | search TotalEmailsToSend="*" OR TotalEmailsSent="*" | timechart sum(TotalEmailsToSend) as TotalEmailsToSend sum(TotalEmailsSent) as TotalEmailsSent ]]></searchTemplate>
     <option name="charting.chart">column</option>
     <option name="charting.primaryAxisTitle.text">Date</option>
     <option name="charting.secondaryAxisTitle.text">Number of Emails</option>
     <option name="charting.chart.useAbsoluteSpacing">true</option>
     <option name="charting.chart.columnSpacing">5</option>
     <option name="charting.legend.placement">top</option>
     <module name="TimeRangePicker">
        <param name="selected">Last 7 days</param>
        <param name="searchWhenChanged">True</param>
    </module>
    </chart>
    </row>

  <row grouping="3,3,3">
  <html>
  <h1><b>INFO</b></h1>
  <a href="https://lists.afilias.info/lurker/mindex/info-cc-        notify@20990101.050000.00000000.en.html">Check INFO stats on Lurker</a><br />
  </html>
  <single>
  <searchName>balance_email_to_send_info</searchName>
  <fields>TotalEmailsToSend</fields>
  <option name="beforeLabel">Total Emails To Send</option>
  </single>

  <single>
  <searchName>balance_email_sent_info</searchName>
  <fields>TotalEmailsSent</fields>
  <option name="beforeLabel">Total Emails Sent</option>
  </single>

  <html>
  <h1><b>ASIA</b></h1>
  <a href="https://lists.afilias.info/lurker/mindex/asia-cc-notify@20990101.050000.00000000.en.html">Check ASIA stats on Lurker</a><br />
  </html>
  <single>
  <searchName>balance_email_to_send_asia</searchName>
  <fields>TotalEmailsToSend</fields>
  <option name="beforeLabel">Total Emails To Send</option>
  </single>

  <single>
  <searchName>balance_email_sent_asia</searchName>
  <fields>TotalEmailsSent</fields>
  <option name="beforeLabel">Total Emails Sent</option>
  </single>

  <html>
  <h1><b>ORG</b></h1>
  <a href="https://lists.afilias.info/lurker/mindex/org-cc-notify@20990101.050000.00000000.en.html">Check ORG stats on Lurker</a>
  </html>
  <single>
  <searchName>balance_email_to_send_org</searchName>
  <fields>TotalEmailsToSend</fields>
  <option name="beforeLabel">Total Emails To Send</option>
  </single>

  <single>
  <searchName>balance_email_sent_org</searchName>
  <fields>TotalEmailsToSend</fields>
  <option name="beforeLabel">Total Emails Sent</option>
  </single>   
  </row>

  <row>
  <table>
  <title>Registrar Emails Sent ALL</title>
  <searchName>balance_email_sent_registrars</searchName>
  <fields>_time, Registrar</fields>
  </table>

  <table>
  <title>Registrar Emails Sent .INFO</title>
  <searchName>balance_email_sent_registrars_info</searchName>
  <fields>_time, Registrar</fields>
  </table>
  </row>

  <row>
  <table>
  <title>Registrar Emails Sent .ASIA</title>
  <searchName>balance_email_sent_registrars_asia</searchName>
  <fields>_time, Registrar</fields>
  </table>

  <table>
  <title>Registrar Emails Sent .ORG</title>
  <searchName>balance_email_sent_registrars_org</searchName>
  <fields>_time, Registrar</fields>
  </table>
  </row>
  </form>
Tags (1)
0 Karma

vellosystems
New Member

Changing the <form> elements back to <dashboard> elements will fix your main problem.

0 Karma

mzax
Splunk Employee
Splunk Employee

You'll need to use searchPostProcess module in order to push correct results to the second row. The second row and the first row doesn't have the same search results. Check the UI Examples app at:

$SPLUNK_HOME/etc/apps/ui_examples/default/data/ui/views/form_inverted_flow_postprocess1.xml

0 Karma

gnovak
Builder

also wondering do i have to start translating the rest of this to advanced XML perhaps?

0 Karma

gnovak
Builder

OH and the space in the URL for INFO lurker is a typo! sorry

0 Karma

gnovak
Builder

btw the single value search results for INFO do not show up, and only one single value shows up for asia and org. there should be 2 single values for each along with a link to a 3rd party application to view more details about the single value that was generated.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...