Splunk Search

Is it possible to add a image on a table ?

theouhuios
Motivator

Hello

I am trying to add a image onto the data in the table. This is what I am trying to make

alt text

The images should change based on certain conditions like is all servers on that particular app as working fine then green, if 1 is down then yellow, if more than one but app is still running then orange and if all servers are down then red.

Any idea on how I can create this?

-theou

Tags (2)

neogeek83
New Member

I know this is an old post, but for those who run across it now...This is now possible in Splunk without a separate app, just need to create your own custom renderer.

Here's an example from the Splunk Dev Documentation: http://dev.splunk.com/view/webframework-codeexamples/SP-CAAAE5Q

0 Karma

Drainy
Champion

If its a static list of items you're checking you could always use the Sideviews HTML module to create your own custom single values or perhaps just use a list of singlevalue modules?

This would achieve the same thing, otherwise just upgrade Sideview Utils! Prove to the company that there will be no impact on service 🙂

Have a look at;

http://splunk-base.splunk.com/answers/56263/singlevalue-drilldown-search-containing-value-displayed-...
Or have a look at the HTML examples in the sideviews app for examples on how to replace singlevalues

0 Karma

sideview
SplunkTrust
SplunkTrust

You can use the Sideview Table module to do this. It has two distinct features both of which can do this, and both of which are documented as examples/tutorials in the Sideview Utils app itself.

a) the Table module's custom rendering features will allow you to write CSS classnames to the rows, incorporating any number of field values from that row. It also allows you to define a "hiddenFields" param so that these little infrastructure fields dont get displayed in the table themselves. Anyway, you can set up a discrete number of CSS classnames to render the rows as, and this can do very similar use cases.

b) The Table module's custom embedding features on the other hand, allow you to embed an HTML module, or any number of modules, into the cells of the relevant column. And then in that HTML module, or in whatever modules you choose to embed, you can use the field values from the row. So again you would specify some hiddenField like imageColor, use that to render one of a number of little images, and it'll work great.

Definitely go back to the Sideview Utils docs, read the first few pages, get a better understanding and only then proceed to the Table module's docs. These features don't involve a lot of XML but they're conceptually advanced and if you don't have a firm understanding of what the advanced XML normally works, when you see the Table's embedding feature it might make you draw some weird conclusions.

http://sideviewapps.com/apps/sideview-utils/

sideview
SplunkTrust
SplunkTrust

You could use the Multiplexer and the HTML module, but that wont work either because Multiplexer is also not in the old Sideview Utils. I'm afraid no, there's no other way. Besides learning how the SimpleResultsTable module works, and then writing a bunch of javascript to patch it's source code and modify its behavior yourself. If I were you I'd find out why they don't want to upgrade. 😃 I'm always here to answer questions, whether they're about functionality or about licensing, or support, you name it.

0 Karma

theouhuios
Motivator

I don't know why but the company doesn't want to make an upgrade to the new version of Sideview. Is there any other way other than that to do it?

0 Karma

sideview
SplunkTrust
SplunkTrust

If you have Sideview Utils but there's no Table module nor any documentation about it, then I think you're using the old version of the app still available on Splunkbase (1.3.5). Upgrade to the latest version from the Sideview site (2.2.9) and you'll get the Table. Also other new modules, improvements, better tools, better docs, etc.. http://sideviewapps.com/apps/sideview-utils/ When you accept the license and download you'll get a tar.gz. You simply go to "Manager > Apps > Install app from file", check the checkbox that says "upgrade existing app", and upload that tar.gz file.

0 Karma

theouhuios
Motivator

Thanks for that. It helps. Is there any link where all the module which can be used by sideview are listed? I was trying to read more about table module but couldn't find any.

0 Karma

gfuente
Motivator

Hello

Have you tried the Iconify command?

http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/iconify

It works for the event view, but maybe it works for you. If it doesn´t, other way to achieve this could be using JS to check the conditions and then load the image.

Regards

theouhuios
Motivator

I added an image on what I am trying to do. Iconify does it to the events but it doesn't do anything to the table.
Would something like this http://splunk-base.splunk.com/answers/60297/how-to-add-image-in-table-cell-based-on-the-field-value-...
can work on it?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...