There is html embedded in a column inside SideView Table module. The table is refreshing within a real-time search module. There is another child Table inside this Table module which is expected to appear when we click on a row in the parent Table. The issue is, upon clicking a row, the child table successfully gets loaded, but all the rows other than the clicked row in parent table disappear. Please note that the parent search is run from a real-time search. The same source works as expected if the parent search is static, not real-time. The source XML is pasted below. Any help would be appreciated. Thanks. <module name="Search"> <param name="search"> index=summary source=*_svc_* NOT [|inputlookup ludef_excluded_appId |rename AppId as appId] | eval reason=status . " " . reasonCode | stats c(eval(status=="Red")) as redCount,c(eval(status=="Yellow")) as yellowCount,c(eval(status=="Green")) as greenCount, values(reason) as reason by appId, serviceName </param> <param name="earliest">rt-30min</param> <param name="latest">rt</param> <module name="PostProcess"> <param name="search"> | stats sum(redCount) as redCount, sum(yellowCount) as yellowCount, sum(greenCount) as greenCount, values(reason) as reason by appId | eval status=case(redCount>0 ,"Red",redCount=0 AND yellowCount>0,"Yellow",1==1,"Green") | mvexpand reason | eval statusmv = split(reason," ") | eval statussv=mvindex(statusmv,0) | where statussv=status | eval statusreason=mvindex(statusmv,1) | lookup ludef_status_reason reasonCode as statusreason OUTPUT shortDescription | stats values(shortDescription) as rdesc by appId, status | eval rshortdesc=mvjoin(rdesc,", ") | eval sequence=case(status="Red","0",status="Yellow","1",status="Green","2") | eval color=case(status="Red","Red",status="Yellow","#FFC200",status="Green","Green") | search status $varStatus$ | lookup ludef_appId_appName appId OUTPUT appName | table status, appId, appName, rshortdesc,color,sequence | rename status as "Status", appId as "AppId", appName as "Name", rshortdesc as "Status Reason" | sort sequence </param> <module name="Table" layoutPanel="panel_row1_col1"> <param name="hiddenFields">color,sequence</param> <module name="HTML" group="row.fields.Status"> <param name="html"> <![CDATA[<svg height="20" width="20" > <circle cx="12" cy="12" r="7" fill="$row.fields.Status$" /> </svg> ]]> </param> </module> <module name="PostProcess"> <param name="search"> | search appId="$row.fields.AppId$" | stats sum(redCount) as redCount, sum(yellowCount) as yellowCount, sum(greenCount) as greenCount, values(reason) as reason by serviceName | eval status=case(redCount>0 ,"Red",redCount=0 AND yellowCount>0,"Yellow",1==1,"Green") | mvexpand reason | eval statusmv = split(reason," ") | eval statussv=mvindex(statusmv,0) | where statussv=status | eval statusreason=mvindex(statusmv,1) | lookup ludef_status_reason reasonCode as statusreason OUTPUT shortDescription | stats values(shortDescription) as rdesc by serviceName, status | eval rshortdesc=mvjoin(rdesc,", ") | eval sequence=case(status="Red","0",status="Yellow","1",status="Green","2") | rename status as "Status", serviceName as "Service", rshortdesc as "Status Reason" | table Status, Service, "Status Reason", sequence | sort sequence </param> <module name="Pager"> <param name="count">15</param> <module name="Table"> <param name="hiddenFields">sequence</param> <module name="HTML" group="row.fields.Status"> <param name="html"> <![CDATA[<svg height="20" width="20" > <circle cx="12" cy="12" r="7" fill="$row.fields.Status$" /> </svg>]]> </param> </module> <module name="Redirector"> <param name="arg.varAppId">$row.fields.AppId$</param> <param name="arg.varService">$row.fields.Service$</param> <param name="url">vw_spot_domain_service</param> </module> </module> </module> </module> </module> </module> </module> ... View more

the below search will give me distinct count of one field by another field some search | stats dc(field1) by field2 but how would I get the distinct values for field1 by field2 so i want something like below: some search | stats distinct(field1) by field2 ... View more

Please help in fixing this issue. Following table drilldown works fine in Internet Explorer 8 for the SideView 1.3.5 index=idx_bcr | head 1000 | eval issuccess=if(Status=="Success",1,0) | stats count by issuccess, Operation | stats sum(issuccess) as successcount by Operation 5 results off row flashtimeline 2013 <!-- $click.fields.Operation$--> flashtimeline True <!--ViewRedirectorLink--> <!--PostProcess--> <!--Search--> Where as it does not work in Internet Explorer 8 for Sideview 2.4.8 the latest version. Following javascript error comes up when a row is clicked and the page is not getting redirected to the flashtimeline view. Javascript Error : Object doesn't support this property or method Observation: If I remove the postprocess and populate the table with only “Search”, everything works just fine. Seems like this is an issue with postprocess when run in IE in the later version of sideview. Thanks, Sridam ... View more

I have two charts within a multiplexer module. When rendered, charts are placed one after another vertically for each element. I want to place the charts side by side (not vertically one after another) for each iteration. Please help !! ... View more