Getting Data In

My requirement is to export from a Dashboard ...multiple panels of different table structure into single csv file

prakashbhanu407
New Member

I have a Dashboard with multiple Panels with statistics results and each Panel containing different set of columns, my requirement is to export all the panels into a single spreadsheet(csv file) so that the user can see all the tables in CSV file instead of going to SPlunk UI

0 Karma

woodcock
Esteemed Legend

In each panel, add XML like this (incrementing the Panel1 to Panel2, etc.) :

<init>
  <unset token="Panel1SID"></unset>
</init>
<done>
  <set token="Panel1SID">"$job.sid$"</set>
</done>

Then in a final (new) panel you can do something like this:

<query>|loadjob $Panel1SID$ | appendpipe [|loadjob $Panel2SID$ ] ... | appendpipe [|loadjob $PanelZSID$] | outputcsv MyOutputFile.csv</query>
0 Karma

prakashbhanu407
New Member

I tried your approach but faced an issue,

Appendpipe is merging the Results from all Panels horizontally, but I need to have the Results one on top of the other in the same Panel with the Panel Headers from the original Panels.

as below

Cumulative Results Panel

Panel1

EmpID EmpName
1 adf
2 asdf
3 ghd
4 ityi

Panel2

EmpName Location
adf MD
asdf WI
ghd TX
ityi IL

Expecting to generate all of the above in the same CSV file.

0 Karma

woodcock
Esteemed Legend

Switch from appendpipe to append

0 Karma

kranthimutyala
Path Finder

@woodcock
can you please post where should the xml piece of code to be placed as im getting warnings.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...