Dashboards & Visualizations

visualization of text

cannstatt
Explorer

Hi guys

I want to build two panels the first one shows the text "Si520"and the second one "Si519".  From the panels I want to use the drilldown option to connect to another dashboard. I tried to use a html panel but than I can't use the drilldown option.

By research I found out I need to use the matchvalue command but I don't understand how to use it.

The link below shows what I want.

https://docs.splunk.com/Documentation/DashApp/0.9.0/DashApp/shapes#Apply_thresholding_to_strings

the vizualition on the left bottom is my aim.
But the code on the website doesn't helps me.

Labels (1)
0 Karma
1 Solution

FelixLeh
Contributor

Hi,
to create the text panels you can do something simple like:

| makeresults
| eval text1= "Si520"
| fields - _time

and use the "Single Value" Visualization.
While your are on the dashboard with this Text Panel go into Edit-Mode, click on the 3 dots on the right and edit drilldown!
Click on "link to dashboard" and pick the one you want.
If you want the Text as a token on the dashboard, open advanced options in the same window and create a token you want to send with the drilldown.
The token has to look like this
form.test_token     =      $click.value$ 

left part in the left field and right part into the right..
the form. is only for cross dashboard drilldown

View solution in original post

0 Karma

cannstatt
Explorer

thanks that worked
do you also know how I can change the background colour of the panel?
Because the editing  mode is for values optimized.

0 Karma

FelixLeh
Contributor

Glad I could help!

Haven't done it myself since I never had the need to, but I have searched for it in the past:

https://community.splunk.com/t5/Archive/panel-background-color-changing/m-p/406988

maybe this will prove useful to you!

otherwise just search the net for other options (have also seen solutions with html)

0 Karma

FelixLeh
Contributor

Hi,
to create the text panels you can do something simple like:

| makeresults
| eval text1= "Si520"
| fields - _time

and use the "Single Value" Visualization.
While your are on the dashboard with this Text Panel go into Edit-Mode, click on the 3 dots on the right and edit drilldown!
Click on "link to dashboard" and pick the one you want.
If you want the Text as a token on the dashboard, open advanced options in the same window and create a token you want to send with the drilldown.
The token has to look like this
form.test_token     =      $click.value$ 

left part in the left field and right part into the right..
the form. is only for cross dashboard drilldown

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...