Deployment Architecture

Can i use events matched progress instead of "waiting for data" ?

timgren
Path Finder

In search mode, there is a progression object in the top left corner that shows:  "#number of  24,040 events matched" until the search is complete. 

Example:

matched.JPG

 

I would like to use the same in a dashboard panel instead of "waiting for data..."  OR at least as a token value that can be applied to the <title>.  

 

 

 

 

 

 

 

Labels (1)
Tags (1)

inventsekar
SplunkTrust
SplunkTrust

Hi @timgren .. maybe check these posts:

https://community.splunk.com/t5/Dashboards-Visualizations/How-to-display-a-progress-bar-in-panels-wh...

https://community.splunk.com/t5/Dashboards-Visualizations/Change-Refresh-Progress-bar-to-spinning-wh...

 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

timgren
Path Finder

No. I want is to show search progress in the panel window -- instead of the default "waiting for data..."  message that appears before the results are completed.  just as it does in event search mode. (see OP pic)

0 Karma

richgalloway
SplunkTrust
SplunkTrust

There's an example of what I think you want at https://docs.splunk.com/Documentation/Splunk/8.1.0/Viz/PanelreferenceforSimplifiedXML#eval

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...