Splunk Dev

Dashboard XML Hiding/Displaying Panels

jjburke306
Loves-to-Learn Lots

Hi all,

I have been trying to create a Dashboard for searches based on a specific ID number (this is intended to help team members find connected data, who aren't proficient in writing searches). The panels are backed by  some extensive search macros. Anyways, this is a two part question regarding XML development:

First, I was wondering if there was a way via XML to check against null return on the search, so that I can hide panels that return nothing, and display only those which return a value from the search?

Second, how would one actually go about using XML to hide panels or display panels, in the case that a search returns no results or a valid result?  Thank you.

Labels (1)
Tags (4)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Panels can be shown/hidden depending on the presence of a token. This token could be set/unset based on the number of results in the query of the panel

 

<panel depends="$results1$">
...

 

0 Karma

jjburke306
Loves-to-Learn Lots

Hi there,

How would you go about actually checking for a certain number of results?

Thanks

0 Karma

jjburke306
Loves-to-Learn Lots
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
   <search>
          <query>...</query>
          <earliest>...</earliest>
          <latest>..</latest>
          <done>
            <set token="search_results">$job.resultCount$</set>
          </done>
    </search>
0 Karma

jjburke306
Loves-to-Learn Lots

Thx a ton. @ITWhisperer 

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...