Dashboards & Visualizations

trelli graph dynamic y axis label

jhuysing
Explorer

Using a lookup to enrich a trellis graph.
initially  added the text to the split by value  which works ok.
until you do a drilldown
Is there someway inert the text as the y-axis  title

Or is the there a way in search on the linked drilldown  dashboard to strip the text from the passed value

Labels (3)
0 Karma

jhuysing
Explorer

Stripped  back source

| eval NewTime=strptime(BATCH_DATE, "%d/%m/%Y %H:%M:%S %Z") 
| eval _time=NewTime 
| rex field=ROW_SUB_HEADER ".*:\s(?P<Code>\d{3})" 
| rename ROW_HEADER as Site, DATA_VALUE as Value
| lookup fault_codes Code OUTPUT Phrase 
| eval CodePhrase = Code+" -- "+Phrase
| chart max(Value) as Value over _time by CodePhrase limit=100</query>

chart options removed

        <drilldown>
          <link target="_blank">/app/production/site_process_code?code=$trellis.value$</link>
        </drilldown>
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Can you share the SimpleXML you already have so we can see what you are working with?

0 Karma
Get Updates on the Splunk Community!

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...