Splunk Search

how can i change transposed table content ?

sfatnass
Contributor

hi i have a table using transpose to show result.

column | row 1

field1 | value1
field2 | value2
field3 | value3
field4 | value4

how can i use a render if i want to change only value3 by icon.

thx

Tags (3)
0 Karma

sfatnass
Contributor

the icon i need to insert is a country flag.
for exemple :

value3 = US
so i the icon of USA will be added
i have a list of flag country based on ISO 3166-1.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi sfatnass,
I'm not sure to have understood your question: do you want to have an icon instead value not for all rows but only for one?
I'm not sure that it's possible, you can substitute all the values of a column with different icons based on range values.

I suggest to download Splunk Dashboard Examples 6.0 App (https://splunkbase.splunk.com/app/1603/), there is an example (Table Icon Set (Rangemap)) for your need.

Every way to change values of a column with icons you have to use rengemap command (| rangemap field=Total severe=0-0 low=1-1000000000 default=severe) and add two files to you App:

  • table_icons_rangemap.js,
  • table_decorations.css.

Bye.
Giuseppe

0 Karma

gcusello
SplunkTrust
SplunkTrust

The only way is to create your own js and css.
You can use the example I described below as a starting point.
Bye.
Giuseppe

0 Karma

sfatnass
Contributor

i know i should to create my own css and javascript but i can't change the other values.
and how what i insert into my javascript and css?
i look about rangemap javascript but this example don't help me to change only value3.
the content of value1 to valueN shouldn't change this is my problem and don't forget i have a search with a command |transpose

also the rangemap accept numeric value for range, and the content of value3 is alphabetic.

0 Karma
Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...