Here is the xml
case_index
$case$
<module name="TextField">
<param name="name">case_index</param>
<param name="label">Case number:</param>
<param name="float">left</param>
<module name="Search">
<param name="search">| metadata type=hosts index="case_$case_index$" | sort
host</param>
<module name="Pulldown">
<param name="name">host</param>
<param name="label">Host:</param>
<param name="float">left</param>
<param name="searchFieldsToDisplay">
<list>
<param name="label">host</param>
<param name="value">host</param>
</list>
</param>
<param name="staticFieldsToDisplay">
<list>
<param name="label">Choose...</param>
<param name="value"></param>
</list>
<list>
<param name="label">All</param>
<param name="value">*</param>
</list>
</param>
<module name="Search" layoutPanel="panel_row1_col1" autoRun="True">
<module name="HTML" >
<param name="html"><![CDATA[
<b><h1>Users for case: $case_index$, host: $host$</font></h1></b><br>]]> </param>
</module>
<param name="search">
index="case_$case_index$" host="$host$" source="*web_access.log" NOT user="-" | chart count(sid) as a by user </param>
<param name="groupLabel">indi</param>
<param name="earliest">0</param>
<module name="ViewstateAdapter">
<param name="suppressionList">
<item>count</item>
<item>charting.chart.stackMode</item>
<item>charting.chart</item>
<item>charting.legend.placement</item>
<item>displayRowNumbers</item>
<item>charting.chart.nullValueMode</item>
<item>charting.layout.splitSeries</item>
</param>
<module name="HiddenFieldPicker">
<param name="strictMode">True</param>
<module name="JobProgressIndicator">
<module name="EnablePreview">
<param name="enable">True</param>
<param name="display">False</param>
<module name="HiddenChartFormatter">
<param name="charting.chart.stackMode">default</param>
<param name="charting.legend.placement">right</param>
<param name="charting.chart">pie</param>
<param name="charting.layout.splitSeries">false</param>
<param name="charting.chart.nullValueMode">gaps</param>
<module name="FlashChart">
<module name="Redirector">
<param name="url">User_panel</param>
<param name="arg.user">$click.value$</param>
<param name="arg.case_index">Showing report for User="$case_index$"</param>
<param name="arg.host">Showing report for User="$click.host$"</param>
</module>
</module>
<param name="charting.chart.sliceCollapsingThreshold">0</param>
<module name="ViewRedirectorLink">
<param name="viewTarget">flashtimeline</param>
</module>
</module>
</module>
</module>
</module>
</module>
The initial value for the case number comes from another page. Once you get the case number you can evaluate the host.Since I redirect from the flashchart I pass the case number along.
... View more
