Splunk Search

display result count in form panel

rzhang520
Engager

Hi,

I have a form has field inputs and a panel to display the search results in a table. Our users are complainting about they don't know how many events returned by the search. And I can't find good way to display event count in the panel. Any ideas?

Thanks.

Tags (3)
0 Karma
1 Solution

rzhang520
Engager

Thank you for the help.

0 Karma

somesoni2
Revered Legend

There nothing seems to be available for simple xml. There could be some workarounds like using searchTemplate and searchPostProcess and adding a single value module to show count. But mostly you'll end up writing extra search just to show count.

0 Karma

rzhang520
Engager

I am using Simple Xml, so there is no way to do it?

0 Karma

Naren26
Path Finder

You can achieve this with <done> tag, like this:

<done>
           <eval token="resultcount_tok">$job.resultCount$</eval>
 </done>

And use it anywhere in your dashboard panel with "$resultcount_tok$"

0 Karma

lukejadamec
Super Champion

You can use |stats count _time AS EventCount

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...