Monitoring Splunk

To use 2 panels with the Panel Depends?

Real_captain
Path Finder

Hi 
Is it possible to use same input with the 2 different panels : 

It works fine with the 1 panel as below : 

<panel depends= "$tokShowPanelB$ ">


But i want to use the same input with the panelC too. But below command doesnot works: 

<panel depends= "$tokShowPanelB$ ,  $tokShowPanelC$">


Can someone please help. 

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

OK got it. The answer is no, you can't display the same input panel in two different rows of the dashboard.

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

"doesnot works" (sic) is not very informative. What exactly have you tried, what are you trying to achieve, and what are you getting that does not match your expectations?

0 Karma

Real_captain
Path Finder

HI @ITWhisperer 
I've an input which i want to use in 2 different panels. 
Example :  There are 3 panels in my dashboard : 

<label>Mode Selection</label>
<choice value="panelA">panelA</choice>
<choice value="panelB">panelB</choice>
<choice value="panelC">panelC</choice> 



I want to show the Input in panelb and panelC and not in panel A .
I have used below code to solve it. I want to know if it is possible to write the input type code only once and use it with multiple panels (panelb and panelC). 

<row>
<panel depends= "$tokShowPanelB$">
<input type="radio" token="Devib" searchWhenChanged="true">
<label>Deviation</label>
<choice value="">ALL</choice>
<choice value="| where Dev = 0">Dev = 0</choice>
<choice value="| where Dev &gt; 150"  > Dev  > 150 </choice>
<default></default>
</input>
</panel>
</row>

<row>
<panel depends= "$tokShowPanelC$">
<input type="radio" token="Devib" searchWhenChanged="true">
<label>Deviation</label>
<choice value="">ALL</choice>
<choice value="| where Dev = 0">Dev = 0</choice>
<choice value="| where Dev &gt; 150"  > Dev  > 150 </choice>
<default></default>
</input>
</panel>
</row>
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It is not clear what you are trying to achieve here, both your radio button inputs are identical, you have shown where tokShowPanelB and tokShowPanelC are set, nor where you are using the Devib token. Please clarify your requirement.

0 Karma

Real_captain
Path Finder

HI @ITWhisperer 

Below is the requirement: 

I want to use an input (radio button) in 2 panels and there are total 3 panels in my dashboard. 

Is it possible to make an input (radio button) visible in 2 panels and not visible in the 3rd panel. 
I've used below code to achieve it but I've to write the same code 2 times. 

I want to use the show the Deviation input in the PanelB and PanelC but it should not be visible in panelA.

 

<label>Mode Selection</label>
<choice value="panelA">panelA</choice>
<choice value="panelB">panelB</choice>
<choice value="panelC">panelC</choice> 

 

<row>
<panel depends= "$tokShowPanelB$">
<input type="radio" token="Devib" searchWhenChanged="true">
<label>Deviation</label>
<choice value="">ALL</choice>
<choice value="| where Dev = 0">Dev = 0</choice>
<choice value="| where Dev &gt; 150"  > Dev  > 150 </choice>
<default></default>
</input>
</panel>
</row>

<row>
<panel depends= "$tokShowPanelC$">
<input type="radio" token="Devib" searchWhenChanged="true">
<label>Deviation</label>
<choice value="">ALL</choice>
<choice value="| where Dev = 0">Dev = 0</choice>
<choice value="| where Dev &gt; 150"  > Dev  > 150 </choice>
<default></default>
</input>
</panel>
</row>
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

OK got it. The answer is no, you can't display the same input panel in two different rows of the dashboard.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...