Dashboards & Visualizations

using search result output to set title of panel in simple xml

ektasiwani
Communicator

Hyee,

I have some 12 hour data in XML file and i am using that data to plot graph in splunk dashboard.
I want to set the time for which i have first available data as title.

How to get this? i don't want to create any drop down or input field or radio field to set token.
Is there any other way to set token?

Or is there any other way to achieve this.

Thanks

Tags (2)
0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

You can add a "Single Value" panel to the dashboard, use the search for the graph as the base, and select only the time field.

<row>
    <panel>
    <single_value>
       <search base="my_search"><query>fields myTime</query></search>
    </single_value>
     <chart>
     <search id="my_search"><query>......</query></search>
     </chart>
 </panel>
 </row>

View solution in original post

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

You can add a "Single Value" panel to the dashboard, use the search for the graph as the base, and select only the time field.

<row>
    <panel>
    <single_value>
       <search base="my_search"><query>fields myTime</query></search>
    </single_value>
     <chart>
     <search id="my_search"><query>......</query></search>
     </chart>
 </panel>
 </row>
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...