Splunk Search

can we rename the group label dynamically ??

rakesh_498115
Motivator

Hi , i am using the following group name for my dashboard..i wanted to change this name dynamically...i.e wanted to add an extra data based on the variable $DS$ .

so tried giving like this

but this doesn't work in my dashboard...is there any way to do..i dont want to use simple results header cause i have grouped all the modules with grp1,grp2,grp3...so its not looking properly as heading..pls suggest a way in acheiving this..thanks.

Tags (1)
0 Karma

sideview
SplunkTrust
SplunkTrust

You cannot set the group attribute dynamically.

However you can put a SimpleResultsHeader (or if you're using Sideview Utils, just an HTML module) into the full width top layoutpanel, just by using the same row and col, but omitting the "_grp"

The dashboard panels lay out like so:

|----------------------------------------------------------------------|
|                                                                      |
|                           panel_row1_col1                            |
|                                                                      |
|----------------------------------------------------------------------|
|                      |                       |                       |
| panel_row1_col1_grp1 |  panel_row1_col1_grp2 | panel_row1_col1_grp3  |
|                      |                       |                       |
|----------------------------------------------------------------------|

So while it's common to think that you can either use the grouped "grp1", "grp2" panels or the single big panel, you can actually use them both in combination and it can be quite useful.

So in your particular XML, put your SimpleResultsHeader or HTML module up in panel_row4_col1

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Introduction to Splunk AI

How are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. Lucky for ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Maximizing the Value of Splunk ES 8.x

Splunk Enterprise Security (ES) continues to be a leader in the Gartner Magic Quadrant, reflecting its pivotal ...