Splunk Search

Insert a heading for 4 rows and give name using HTML

vijaykumartcs
Explorer

I have a dashboard which has 11 rows and each row has 4 panels, now out of 11 rows 5rows belong to one application and another 6 rows belong to another application.

I want to combine 5 rows and name it as "Application A" and combine 6 rows and name it as "Application B" within the same dashboard.

Labels (1)
Tags (3)
0 Karma
1 Solution

renjith_nair
SplunkTrust
SplunkTrust

Are you looking for something similar to below?

<dashboard>
  <label>Headings</label>
  <row>
    <panel>
      <html>
      <h1 align="center">Application A</h1>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <title>First Row</title>
      <table>
        <search>
          <query>|makeresults count=5|eval value=random()</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="refresh.display">progressbar</option>
      </table>
    </panel>
    <panel>
      <chart>
        <search>
          <query>| makeresults |eval count=10</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">pie</option>
        <option name="charting.drilldown">none</option>
      </chart>
    </panel>
  </row>
  <row>
    <panel>
      <html>
      <h4 align="center">other rows</h4>
      <h4 align="center">.</h4>
      <h4 align="center">.</h4>
      <h4 align="center">.</h4>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <html>
      <h1 align="center">Application B</h1>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <title>6th Row</title>
      <table>
        <search>
          <query>|makeresults count=5|eval value=random()</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</dashboard>

 

Happy Splunking!

View solution in original post

renjith_nair
SplunkTrust
SplunkTrust

Are you looking for something similar to below?

<dashboard>
  <label>Headings</label>
  <row>
    <panel>
      <html>
      <h1 align="center">Application A</h1>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <title>First Row</title>
      <table>
        <search>
          <query>|makeresults count=5|eval value=random()</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="refresh.display">progressbar</option>
      </table>
    </panel>
    <panel>
      <chart>
        <search>
          <query>| makeresults |eval count=10</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">pie</option>
        <option name="charting.drilldown">none</option>
      </chart>
    </panel>
  </row>
  <row>
    <panel>
      <html>
      <h4 align="center">other rows</h4>
      <h4 align="center">.</h4>
      <h4 align="center">.</h4>
      <h4 align="center">.</h4>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <html>
      <h1 align="center">Application B</h1>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <title>6th Row</title>
      <table>
        <search>
          <query>|makeresults count=5|eval value=random()</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</dashboard>

 

Happy Splunking!
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...