Re: how do I show a blank panel as nothing but sti...

HattrickNZ · ‎05-20-2020

for example I have a 2x2 grid of 4 charts but I only have 3 charts.
I want to show the first 3 charts in the first 3 quadrants and blank/empty in the 4th quadrant.

This is what i have got

Code:

 <panel>
      <title>blank/delete</title>
      <chart>
        <search>
          <query>blank/delete</query>
          <earliest>$earliest$</earliest>
          <latest>$latest$</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
        <option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
        <option name="charting.axisTitleX.visibility">visible</option>
        <option name="charting.axisTitleY.visibility">visible</option>
        <option name="charting.axisTitleY2.visibility">visible</option>
        <option name="charting.axisX.scale">linear</option>
        <option name="charting.axisY.scale">linear</option>
        <option name="charting.axisY2.enabled">0</option>
        <option name="charting.axisY2.scale">inherit</option>
        <option name="charting.chart">line</option>
        <option name="charting.chart.bubbleMaximumSize">50</option>
        <option name="charting.chart.bubbleMinimumSize">10</option>
        <option name="charting.chart.bubbleSizeBy">area</option>
        <option name="charting.chart.nullValueMode">gaps</option>
        <option name="charting.chart.showDataLabels">none</option>
        <option name="charting.chart.sliceCollapsingThreshold">0.01</option>
        <option name="charting.chart.stackMode">default</option>
        <option name="charting.chart.style">minimal</option>
        <option name="charting.drilldown">all</option>
        <option name="charting.layout.splitSeries">0</option>
        <option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
        <option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
        <option name="charting.legend.placement">right</option>
      </chart>
    </panel>

gcusello · ‎05-20-2020

Hi
you can use an html box like this in the panel:

  <html>
    <h1>
      <center />
    </h1>
  </html>

this is an example in which I wanted to have in the first row of the panle only one Seingle Value and the other three in the second part:

<panel>
  <title>MDM</title>
  <html>
    <style type="text/css">
        .single {
          width: 50% !important;
          }
    </style>
  </html>
  <single>
    <title>Core</title>
    <search>
      <query>
        my_search1
      </query>
    </search>
    <option name="drilldown">none</option>
  </single>
  <html>
    <h1>
      <center />
    </h1>
  </html>
  <single>
    <title>Compliant</title>
    <search>
      <query>
        my_search2
      </query>
    </search>
    <option name="drilldown">all</option>
    <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
    <option name="underLabel">Device</option>
    <option name="useColors">0</option>
  </single>
  <html>
    <h1>
      <center />
    </h1>
  </html>
  <single>
    <title>Compromised</title>
    <search>
      <query>
        my_search3
      </query>
    </search>
    <option name="drilldown">all</option>
    <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
    <option name="underLabel">Device</option>
    <option name="useColors">1</option>
  </single>
  <single>
    <title>Blocked</title>
    <search>
      <query>
        my_search4
        </query>
    </search>
    <option name="drilldown">all</option>
    <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
    <option name="underLabel">Device</option>
    <option name="useColors">1</option>
  </single>
  <single>
    <title>Quarantined</title>
    <search>
      <query>
        my_search5
      </query>
    </search>
    <option name="drilldown">all</option>
    <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
    <option name="underLabel">Device</option>
    <option name="useColors">1</option>
  </single>
</panel>

Ciao.
Giuseppe

how do I show a blank panel as nothing but still fill the space?

Enterprise Security Content Update (ESCU) | New Releases

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

Index This | What are the 12 Days of Splunk-mas?