Splunk Search

how can i change transposed table content ?

sfatnass
Contributor

hi i have a table using transpose to show result.

column | row 1

field1 | value1
field2 | value2
field3 | value3
field4 | value4

how can i use a render if i want to change only value3 by icon.

thx

Tags (3)
0 Karma

sfatnass
Contributor

the icon i need to insert is a country flag.
for exemple :

value3 = US
so i the icon of USA will be added
i have a list of flag country based on ISO 3166-1.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi sfatnass,
I'm not sure to have understood your question: do you want to have an icon instead value not for all rows but only for one?
I'm not sure that it's possible, you can substitute all the values of a column with different icons based on range values.

I suggest to download Splunk Dashboard Examples 6.0 App (https://splunkbase.splunk.com/app/1603/), there is an example (Table Icon Set (Rangemap)) for your need.

Every way to change values of a column with icons you have to use rengemap command (| rangemap field=Total severe=0-0 low=1-1000000000 default=severe) and add two files to you App:

  • table_icons_rangemap.js,
  • table_decorations.css.

Bye.
Giuseppe

0 Karma

gcusello
SplunkTrust
SplunkTrust

The only way is to create your own js and css.
You can use the example I described below as a starting point.
Bye.
Giuseppe

0 Karma

sfatnass
Contributor

i know i should to create my own css and javascript but i can't change the other values.
and how what i insert into my javascript and css?
i look about rangemap javascript but this example don't help me to change only value3.
the content of value1 to valueN shouldn't change this is my problem and don't forget i have a search with a command |transpose

also the rangemap accept numeric value for range, and the content of value3 is alphabetic.

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...