Dashboards & Visualizations

using search result output to set title of panel in simple xml

ektasiwani
Communicator

Hyee,

I have some 12 hour data in XML file and i am using that data to plot graph in splunk dashboard.
I want to set the time for which i have first available data as title.

How to get this? i don't want to create any drop down or input field or radio field to set token.
Is there any other way to set token?

Or is there any other way to achieve this.

Thanks

Tags (2)
0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

You can add a "Single Value" panel to the dashboard, use the search for the graph as the base, and select only the time field.

<row>
    <panel>
    <single_value>
       <search base="my_search"><query>fields myTime</query></search>
    </single_value>
     <chart>
     <search id="my_search"><query>......</query></search>
     </chart>
 </panel>
 </row>

View solution in original post

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

You can add a "Single Value" panel to the dashboard, use the search for the graph as the base, and select only the time field.

<row>
    <panel>
    <single_value>
       <search base="my_search"><query>fields myTime</query></search>
    </single_value>
     <chart>
     <search id="my_search"><query>......</query></search>
     </chart>
 </panel>
 </row>
0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...