Dashboards & Visualizations

visualization of text

cannstatt
Explorer

Hi guys

I want to build two panels the first one shows the text "Si520"and the second one "Si519".  From the panels I want to use the drilldown option to connect to another dashboard. I tried to use a html panel but than I can't use the drilldown option.

By research I found out I need to use the matchvalue command but I don't understand how to use it.

The link below shows what I want.

https://docs.splunk.com/Documentation/DashApp/0.9.0/DashApp/shapes#Apply_thresholding_to_strings

the vizualition on the left bottom is my aim.
But the code on the website doesn't helps me.

Labels (1)
0 Karma
1 Solution

FelixLeh
Contributor

Hi,
to create the text panels you can do something simple like:

| makeresults
| eval text1= "Si520"
| fields - _time

and use the "Single Value" Visualization.
While your are on the dashboard with this Text Panel go into Edit-Mode, click on the 3 dots on the right and edit drilldown!
Click on "link to dashboard" and pick the one you want.
If you want the Text as a token on the dashboard, open advanced options in the same window and create a token you want to send with the drilldown.
The token has to look like this
form.test_token     =      $click.value$ 

left part in the left field and right part into the right..
the form. is only for cross dashboard drilldown

View solution in original post

0 Karma

cannstatt
Explorer

thanks that worked
do you also know how I can change the background colour of the panel?
Because the editing  mode is for values optimized.

0 Karma

FelixLeh
Contributor

Glad I could help!

Haven't done it myself since I never had the need to, but I have searched for it in the past:

https://community.splunk.com/t5/Archive/panel-background-color-changing/m-p/406988

maybe this will prove useful to you!

otherwise just search the net for other options (have also seen solutions with html)

0 Karma

FelixLeh
Contributor

Hi,
to create the text panels you can do something simple like:

| makeresults
| eval text1= "Si520"
| fields - _time

and use the "Single Value" Visualization.
While your are on the dashboard with this Text Panel go into Edit-Mode, click on the 3 dots on the right and edit drilldown!
Click on "link to dashboard" and pick the one you want.
If you want the Text as a token on the dashboard, open advanced options in the same window and create a token you want to send with the drilldown.
The token has to look like this
form.test_token     =      $click.value$ 

left part in the left field and right part into the right..
the form. is only for cross dashboard drilldown

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

The surge in machine data is already hitting enterprise budgets, and the agentic era will only intensify it. ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...