Dashboards & Visualizations

v6.0.5: Hide HiddenSearch module when it is used to power HiddenPostProcess modules?

the_wolverine
Champion

I have a HiddenSearch that is populating multiple HiddenPostProcess modules downstream. How can I hide the HiddenSearch module since I am using the HiddenPostProcess modules to populate the panels?

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

It's been a while since I've used those, but I remember the approach being something like this (imagine correct AdvancedXML syntax around this):

...
HiddenSearch, layoutPanel="panel_row1_col1"
  HiddenPostProcess
    Visualization
  /HiddenPostProcess
  HiddenPostProcess layoutPanel="panel_row1_col1"
    Visualization
  /HiddenPostProcess
  HiddenPostProcess layoutPanel="panel_row2_col1"
    Visualization
  /HiddenPostProcess
  HiddenPostProcess layoutPanel="panel_row3_col1"
    Visualization
  /HiddenPostProcess
/HiddenSearch

The HiddenSearch technically is part of the 1x1 panel, but doesn't display anything really. You should also be able to set the layoutPanel for the first HPP to 1x1 and have the HiddenSearch run in the viewHeader or whereever... it just needs a valid panel to "be" in, despite not displaying a lot.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

It's been a while since I've used those, but I remember the approach being something like this (imagine correct AdvancedXML syntax around this):

...
HiddenSearch, layoutPanel="panel_row1_col1"
  HiddenPostProcess
    Visualization
  /HiddenPostProcess
  HiddenPostProcess layoutPanel="panel_row1_col1"
    Visualization
  /HiddenPostProcess
  HiddenPostProcess layoutPanel="panel_row2_col1"
    Visualization
  /HiddenPostProcess
  HiddenPostProcess layoutPanel="panel_row3_col1"
    Visualization
  /HiddenPostProcess
/HiddenSearch

The HiddenSearch technically is part of the 1x1 panel, but doesn't display anything really. You should also be able to set the layoutPanel for the first HPP to 1x1 and have the HiddenSearch run in the viewHeader or whereever... it just needs a valid panel to "be" in, despite not displaying a lot.

martin_mueller
SplunkTrust
SplunkTrust

Could you explain that a little more? Maybe it's just the .conf aftermath messing with my head...

0 Karma

ben_leung
Builder

So changing the layoutPanel for the HiddenSearch to a a valid value (e.g. viewHeader) will mask the panel from display.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Great... can I mark this as answered then?

0 Karma

the_wolverine
Champion

Yes, that worked martin. Thank you!

0 Karma

sowings
Splunk Employee
Splunk Employee

Just don't give it any visualization, nor a layoutPanel attribute.

0 Karma

the_wolverine
Champion

I got "Misconfigured view '_test' - layoutPanel is not defined for module HiddenSearch. " AND, the view would not load (produced an error and no UI).

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...