Splunk Search
Highlighted

Change graphics in XML

Hello,

I have the splunk chart structure and would like to leave the 03 charts that are of numbers together within the same square, how can i do this in xml?

I need the first column to have the 03 number charts, one below the other, with reduced sizes.

alt text

0 Karma
Highlighted

Re: Change graphics in XML

Ultra Champion
<form hideTitle="false">
    <label>test</label>
    <init>
      <set token="showtab1">first</set>
    </init>
    <fieldset submitButton="true">
      <input type="time" token="field1">
        <label></label>
        <default>
          <earliest>-1h@h</earliest>
          <latest>now</latest>
        </default>
      </input>
    </fieldset>
 <row>
   <panel>
     <html>
          <style>
             .dashboard-header {
                 margin-bottom: 0px;
                 padding-top: 0px;
                 min-height: 0px;
             }
             .myTitle{
                font-size:150%;
                font-weight:bold;
                color:red;
                text-align:center;
             }
          </style>
          <div class="myTitle">My Custom Title</div>
     </html>
   </panel>
 </row>
    <row>
      <panel id="singleValuePanel">
        <title>ALTITUDE</title>
        <html depends="$hiddenForCSS$">
            <style>
              #singleValuePanel{
                width: 15% !important;
              }
              #chartPanel{
                width: 28% !important;
               }
              #chartPanel2{
                width: 28% !important;
               }

              #chartPanel3{
                width: 28% !important;
               }
               #singleValuePanel h3 {
         text-align: center !important;
         }
            </style>
          </html>
        <single>
          <title>CV</title>
          <search>
            <query>| makeresults
   | eval count = random() % 50</query>
            <earliest>$field1.earliest$</earliest>
            <latest>$field1.latest$</latest>
          </search>
          <option name="colorMode">block</option>
          <option name="drilldown">none</option>
          <option name="height">93</option>
          <option name="rangeColors">["0x53a051","0xdc4e41"]</option>
          <option name="rangeValues">[0]</option>
          <option name="refresh.display">progressbar</option>
          <option name="useColors">1</option>
        </single>
        <html>
         </html>
        <single>
          <title>PJ</title>
          <search>
            <query>| makeresults
   | eval count = random() % 50</query>
            <earliest>$field1.earliest$</earliest>
            <latest>$field1.latest$</latest>
          </search>
          <option name="colorMode">block</option>
          <option name="drilldown">none</option>
          <option name="rangeColors">["0x53a051","0xf8be34","0xf1813f","0xdc4e41"]</option>
          <option name="rangeValues">[0,70,100]</option>
          <option name="refresh.display">progressbar</option>
          <option name="useColors">1</option>
        </single>
        <html>
         </html>
        <single>
          <title>PF</title>
          <search>
            <query>| makeresults
   | eval count = random() % 50</query>
            <earliest>$field1.earliest$</earliest>
            <latest>$field1.latest$</latest>
          </search>
          <option name="colorMode">block</option>
          <option name="drilldown">none</option>
          <option name="rangeColors">["0x53a051","0xf8be34","0xf1813f","0xdc4e41"]</option>
          <option name="rangeValues">[0,70,100]</option>
          <option name="refresh.display">progressbar</option>
          <option name="useColors">1</option>
        </single>
      </panel>
      <panel id="chartPanel">
        <title>EMAIL SERVER</title>
        <chart>
          <title>chart 1</title>
          <search>
            <query>index=* | timechart count by usenull=f LogName</query>
            <earliest>$field1.earliest$</earliest>
            <latest>$field1.latest$</latest>
          </search>
          <option name="charting.chart">column</option>
          <option name="charting.drilldown">none</option>
          <option name="charting.legend.placement">bottom</option>
          <option name="refresh.display">progressbar</option>
        </chart>
        <chart>
          <title>chart 2</title>
          <search>
            <query>| makeresults count=2 | streamstats count | eval _time=if((count == 2),relative_time('_time',"-12h"),relative_time('_time',"-5s")) | makecontinuous span=1m | eval count=(random() % 2)</query>
            <earliest>$field1.earliest$</earliest>
            <latest>$field1.latest$</latest>
          </search>
          <option name="charting.chart">line</option>
          <option name="charting.drilldown">none</option>
          <option name="refresh.display">progressbar</option>
        </chart>
      </panel>
      <panel id="chartPanel2">
        <title>CHAT SERVER</title>
        <chart>
          <title>chart 2</title>
          <search>
            <query>index=* | timechart count by usenull=f useother=f Name</query>
            <earliest>$field1.earliest$</earliest>
            <latest>$field1.latest$</latest>
          </search>
          <option name="charting.chart">area</option>
          <option name="charting.drilldown">none</option>
          <option name="charting.legend.placement">bottom</option>
          <option name="refresh.display">progressbar</option>
        </chart>
        <chart>
          <title>chart 2</title>
          <search>
            <query>| makeresults count=2 | streamstats count | eval _time=if((count == 2),relative_time('_time',"-12h"),relative_time('_time',"-5s")) | makecontinuous span=1m | eval count=(random() % 2)</query>
            <earliest>$field1.earliest$</earliest>
            <latest>$field1.latest$</latest>
          </search>
          <option name="charting.chart">line</option>
          <option name="charting.drilldown">none</option>
          <option name="refresh.display">progressbar</option>
        </chart>
      </panel>
      <panel id="chartPanel3">
        <title>IXN</title>
        <chart>
          <title>chart 3</title>
          <search>
            <query>index=* | timechart count by usenull=f useother=f State</query>
            <earliest>$field1.earliest$</earliest>
            <latest>$field1.latest$</latest>
          </search>
          <option name="charting.chart">line</option>
          <option name="charting.drilldown">none</option>
          <option name="refresh.display">progressbar</option>
        </chart>
        <chart>
          <title>chart 2</title>
          <search>
            <query>| makeresults count=2 | streamstats count | eval _time=if((count == 2),relative_time('_time',"-12h"),relative_time('_time',"-5s")) | makecontinuous span=1m | eval count=(random() % 2)</query>
            <earliest>$field1.earliest$</earliest>
            <latest>$field1.latest$</latest>
          </search>
          <option name="charting.chart">line</option>
          <option name="charting.drilldown">none</option>
          <option name="refresh.display">progressbar</option>
        </chart>
      </panel>
    </row>
  </form>

My answer amended.
Finally, <form hideTitle="true">

0 Karma
Highlighted

Re: Change graphics in XML

Hi.
And how do I get titles centered?

For example, cv, pj and pf?

alt text

0 Karma
Highlighted

Re: Change graphics in XML

<form>
  <label>test</label>
  <init>
    <set token="showtab1">first</set>
  </init>
  <fieldset submitButton="true">
    <input type="time" token="field1">
      <label></label>
      <default>
        <earliest>-1h@h</earliest>
        <latest>now</latest>
      </default>
    </input>
  </fieldset>
  <row>
    <panel id="singleValuePanel">
      <title>ALTITUDE</title>
      <html depends="$hiddenForCSS$">
          <style>
            #singleValuePanel{
              width: 15% !important;
            }
            #chartPanel{
              width: 28% !important;
             }
            #chartPanel2{
              width: 28% !important;
             }

            #chartPanel3{
              width: 28% !important;
             }
          </style>
        </html>
      <single>
        <title>CV</title>
        <search>
          <query>| makeresults
 | eval count = random() % 50</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="colorMode">block</option>
        <option name="drilldown">none</option>
        <option name="height">93</option>
        <option name="rangeColors">["0x53a051","0xdc4e41"]</option>
        <option name="rangeValues">[0]</option>
        <option name="refresh.display">progressbar</option>
        <option name="useColors">1</option>
      </single>
      <html>
         &lt;br/&gt;
       </html>
      <single>
        <title>PJ</title>
        <search>
          <query>| makeresults
 | eval count = random() % 50</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="colorMode">block</option>
        <option name="drilldown">none</option>
        <option name="rangeColors">["0x53a051","0xf8be34","0xf1813f","0xdc4e41"]</option>
        <option name="rangeValues">[0,70,100]</option>
        <option name="refresh.display">progressbar</option>
        <option name="useColors">1</option>
      </single>
      <html>
         &lt;br/&gt;
       </html>
      <single>
        <title>PF</title>
        <search>
          <query>| makeresults
 | eval count = random() % 50</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="colorMode">block</option>
        <option name="drilldown">none</option>
        <option name="rangeColors">["0x53a051","0xf8be34","0xf1813f","0xdc4e41"]</option>
        <option name="rangeValues">[0,70,100]</option>
        <option name="refresh.display">progressbar</option>
        <option name="useColors">1</option>
      </single>
    </panel>
    <panel id="chartPanel">
      <title>EMAIL SERVER</title>
      <chart>
        <title>chart 1</title>
        <search>
          <query>index=* | timechart count by usenull=f LogName</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="charting.chart">column</option>
        <option name="charting.drilldown">none</option>
        <option name="charting.legend.placement">bottom</option>
        <option name="refresh.display">progressbar</option>
      </chart>
      <chart>
        <title>chart 2</title>
        <search>
          <query>| makeresults count=2 | streamstats count | eval _time=if((count == 2),relative_time('_time',"-12h"),relative_time('_time',"-5s")) | makecontinuous span=1m | eval count=(random() % 2)</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="charting.chart">line</option>
        <option name="charting.drilldown">none</option>
        <option name="refresh.display">progressbar</option>
      </chart>
    </panel>
    <panel id="chartPanel2">
      <title>CHAT SERVER</title>
      <chart>
        <title>chart 2</title>
        <search>
          <query>index=* | timechart count by usenull=f useother=f Name</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="charting.chart">area</option>
        <option name="charting.drilldown">none</option>
        <option name="charting.legend.placement">bottom</option>
        <option name="refresh.display">progressbar</option>
      </chart>
      <chart>
        <title>chart 2</title>
        <search>
          <query>| makeresults count=2 | streamstats count | eval _time=if((count == 2),relative_time('_time',"-12h"),relative_time('_time',"-5s")) | makecontinuous span=1m | eval count=(random() % 2)</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="charting.chart">line</option>
        <option name="charting.drilldown">none</option>
        <option name="refresh.display">progressbar</option>
      </chart>
    </panel>
    <panel id="chartPanel3">
      <title>IXN</title>
      <chart>
        <title>chart 3</title>
        <search>
          <query>index=* | timechart count by usenull=f useother=f State</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="charting.chart">line</option>
        <option name="charting.drilldown">none</option>
        <option name="refresh.display">progressbar</option>
      </chart>
      <chart>
        <title>chart 2</title>
        <search>
          <query>| makeresults count=2 | streamstats count | eval _time=if((count == 2),relative_time('_time',"-12h"),relative_time('_time',"-5s")) | makecontinuous span=1m | eval count=(random() % 2)</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="charting.chart">line</option>
        <option name="charting.drilldown">none</option>
        <option name="refresh.display">progressbar</option>
      </chart>
    </panel>
  </row>
</form>
0 Karma
Highlighted

Re: Change graphics in XML

Ultra Champion

The answer has been corrected. please confirm.

0 Karma
Highlighted

Re: Change graphics in XML

Legend

@leandromatpereira try the Splunk Dashboard App (Beta) which gives your a free from canvas kind of layout to drag, drop and resize viz as per your needs.

PS: Do read about the app as it uses JSON layout instead of Simple XML. https://docs.splunk.com/Documentation/DashApp/latest/DashApp/IntroApp




| eval message="Happy Splunking!!!"


0 Karma