Splunk Search

Grouping panels from different rows into one panel?

shankarananth
Builder

Need your help friends.

I have data appear as mentioned below. But i have requirement that instead of displaying same name for 4 different panels. I need to group all the value and display it in single panel for all the 4 rows how to achieve it .

Below mentioned all the 4 panels(Windows data) are simple name display in html.

Current result.

alt text

Expected result.

alt text

Thanks in advance ..

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Put all Windows Data n tables into one panel, something like this:

...
<row>
  <panel><html>...</html><panel>
  <panel>
    <table>...</table>
    <table>...</table>
    <table>...</table>
    <table>...</table>
  </panel>
  <panel>
    <table>...</table>
    <table>...</table>
    <table>...</table>
    <table>...</table>
  </panel>
</row>

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Put all Windows Data n tables into one panel, something like this:

...
<row>
  <panel><html>...</html><panel>
  <panel>
    <table>...</table>
    <table>...</table>
    <table>...</table>
    <table>...</table>
  </panel>
  <panel>
    <table>...</table>
    <table>...</table>
    <table>...</table>
    <table>...</table>
  </panel>
</row>

View solution in original post

niketnilay
Legend

@shankarananth agree to @martin_mueller 's approach. Your 2nd row will have first <panel> with only <single> and remaining three <panels> with four <table> elements. In order to align <single> value to the center of panel you may have to use CSS override like position: relative; top: 30% !important;

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

DalJeanis
SplunkTrust
SplunkTrust

paging @niketnilay - is vertical span like this possible in SimpleXML?

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!