Splunk Search

can we rename the group label dynamically ??

rakesh_498115
Motivator

Hi , i am using the following group name for my dashboard..i wanted to change this name dynamically...i.e wanted to add an extra data based on the variable $DS$ .

so tried giving like this

but this doesn't work in my dashboard...is there any way to do..i dont want to use simple results header cause i have grouped all the modules with grp1,grp2,grp3...so its not looking properly as heading..pls suggest a way in acheiving this..thanks.

Tags (1)
0 Karma

sideview
SplunkTrust
SplunkTrust

You cannot set the group attribute dynamically.

However you can put a SimpleResultsHeader (or if you're using Sideview Utils, just an HTML module) into the full width top layoutpanel, just by using the same row and col, but omitting the "_grp"

The dashboard panels lay out like so:

|----------------------------------------------------------------------|
|                                                                      |
|                           panel_row1_col1                            |
|                                                                      |
|----------------------------------------------------------------------|
|                      |                       |                       |
| panel_row1_col1_grp1 |  panel_row1_col1_grp2 | panel_row1_col1_grp3  |
|                      |                       |                       |
|----------------------------------------------------------------------|

So while it's common to think that you can either use the grouped "grp1", "grp2" panels or the single big panel, you can actually use them both in combination and it can be quite useful.

So in your particular XML, put your SimpleResultsHeader or HTML module up in panel_row4_col1

0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...