Dashboards & Visualizations

trelli graph dynamic y axis label

jhuysing
Explorer

Using a lookup to enrich a trellis graph.
initially  added the text to the split by value  which works ok.
until you do a drilldown
Is there someway inert the text as the y-axis  title

Or is the there a way in search on the linked drilldown  dashboard to strip the text from the passed value

Labels (3)
0 Karma

jhuysing
Explorer

Stripped  back source

| eval NewTime=strptime(BATCH_DATE, "%d/%m/%Y %H:%M:%S %Z") 
| eval _time=NewTime 
| rex field=ROW_SUB_HEADER ".*:\s(?P<Code>\d{3})" 
| rename ROW_HEADER as Site, DATA_VALUE as Value
| lookup fault_codes Code OUTPUT Phrase 
| eval CodePhrase = Code+" -- "+Phrase
| chart max(Value) as Value over _time by CodePhrase limit=100</query>

chart options removed

        <drilldown>
          <link target="_blank">/app/production/site_process_code?code=$trellis.value$</link>
        </drilldown>
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Can you share the SimpleXML you already have so we can see what you are working with?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...