i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)
Env perc
CPU 80
Disk_Space 90
RAM 20
you should make table.
after that,
| stats values(*) as * by Env
Visualization > Single Value with Trellis
these are metric logs i need cpu ,ram,disk space metric logs and all these 3 names in one single value panel with colors and percentage
Have you try this? How is it?
all these 3 names in one single value panel with colors and percentage
you want three but single. I think single means one, isn't it?
Trellis is the only native way to do this: 1 panel but multiple related visualizations in that 1 panel.
This is done with the Trellis
feature:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/TrellisView
these are metric logs i need cpu ,ram,disk space metric logs and all these 3 names in one single value panel with colors and percentage
That is EXACTLY what trellis
does. Do your homework.
Hi @mahendra559,
you should try to use a Poste Process Search to have the results you want and to display in different single panels, see the below example:
<dashboard>
<label>Multi single panel</label>
<search id="my_search">
<query>
| makeresults
| eval CPU="2", RAM="32GB", disk="1TB"
</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<row>
<panel>
<single>
<title>CPU</title>
<search base="my_search">
<query>
| table CPU
</query>
</search>
<option name="drilldown">none</option>
</single>
</panel>
<panel>
<single>
<title>RAM</title>
<search base="my_search">
<query>
| table RAM
</query>
</search>
<option name="drilldown">none</option>
</single>
</panel>
<panel>
<single>
<title>Disk</title>
<search base="my_search">
<query>
| table disk
</query>
</search>
<option name="drilldown">none</option>
</single>
</panel>
</row>
</dashboard>
Ciao.
Giuseppe
these are metric logs i need cpu ,ram,disk space metric logs and all these 3 names in one single value panel with colors and percentage
Can you please share more details on the requirement.
What I've done in the past is combine multiple fields (usually just two) into a single field using the .
operator.
... | eval foo = bar . ":" . baz
these are metric logs i need cpu ,ram,disk space metric logs and all these 3 names in one single value panel with colors and percentage
I love how requirements change after answers are provided. What you want to do is not possible with one single-value panel.