I am trying to add a image onto the data in the table. This is what I am trying to make
The images should change based on certain conditions like is all servers on that particular app as working fine then green, if 1 is down then yellow, if more than one but app is still running then orange and if all servers are down then red.
Any idea on how I can create this?
Have you tried the Iconify command?
It works for the event view, but maybe it works for you. If it doesn´t, other way to achieve this could be using JS to check the conditions and then load the image.
I added an image on what I am trying to do. Iconify does it to the events but it doesn't do anything to the table.
Would something like this http://splunk-base.splunk.com/answers/60297/how-to-add-image-in-table-cell-based-on-the-field-value-...
can work on it?
You can use the Sideview Table module to do this. It has two distinct features both of which can do this, and both of which are documented as examples/tutorials in the Sideview Utils app itself.
a) the Table module's custom rendering features will allow you to write CSS classnames to the rows, incorporating any number of field values from that row. It also allows you to define a "hiddenFields" param so that these little infrastructure fields dont get displayed in the table themselves. Anyway, you can set up a discrete number of CSS classnames to render the rows as, and this can do very similar use cases.
b) The Table module's custom embedding features on the other hand, allow you to embed an HTML module, or any number of modules, into the cells of the relevant column. And then in that HTML module, or in whatever modules you choose to embed, you can use the field values from the row. So again you would specify some hiddenField like imageColor, use that to render one of a number of little images, and it'll work great.
Definitely go back to the Sideview Utils docs, read the first few pages, get a better understanding and only then proceed to the Table module's docs. These features don't involve a lot of XML but they're conceptually advanced and if you don't have a firm understanding of what the advanced XML normally works, when you see the Table's embedding feature it might make you draw some weird conclusions.
Thanks for that. It helps. Is there any link where all the module which can be used by sideview are listed? I was trying to read more about table module but couldn't find any.
If you have Sideview Utils but there's no Table module nor any documentation about it, then I think you're using the old version of the app still available on Splunkbase (1.3.5). Upgrade to the latest version from the Sideview site (2.2.9) and you'll get the Table. Also other new modules, improvements, better tools, better docs, etc.. http://sideviewapps.com/apps/sideview-utils/ When you accept the license and download you'll get a tar.gz. You simply go to "Manager > Apps > Install app from file", check the checkbox that says "upgrade existing app", and upload that tar.gz file.
I don't know why but the company doesn't want to make an upgrade to the new version of Sideview. Is there any other way other than that to do it?
If its a static list of items you're checking you could always use the Sideviews HTML module to create your own custom single values or perhaps just use a list of singlevalue modules?
This would achieve the same thing, otherwise just upgrade Sideview Utils! Prove to the company that there will be no impact on service 🙂
Have a look at;
Or have a look at the HTML examples in the sideviews app for examples on how to replace singlevalues
I know this is an old post, but for those who run across it now...This is now possible in Splunk without a separate app, just need to create your own custom renderer.
Here's an example from the Splunk Dev Documentation: http://dev.splunk.com/view/webframework-codeexamples/SP-CAAAE5Q