Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About smuppava
smuppava
Explorer
Member since:
10-24-2016
06-05-2020
Community Statistics
| Posts | 31 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 3 |
| Member Since | 10-24-2016 |
Activity Feed
- Karma Re: How to hide a dashboard panel when there are no results displayed? for skoelpin. 06-05-2020 12:48 AM
- Got Karma for How do I hide panel when "no results found" text is displayed on dashboard. 06-05-2020 12:48 AM
- Got Karma for How to hide a dashboard panel when there are no results displayed?. 06-05-2020 12:48 AM
- Got Karma for How do I display "no data found" message when there are no search results displayed for each dashboard panel?. 06-05-2020 12:48 AM
- Posted Re: How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-02-2016 07:48 AM
- Posted Re: How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 12:07 PM
- Posted Re: How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 12:06 PM
- Posted Re: How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 08:50 AM
- Posted Re: How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 08:24 AM
- Posted Re: How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 08:23 AM
- Posted Re: How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 08:21 AM
- Posted Re: How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 07:53 AM
- Posted How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 07:51 AM
- Tagged How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 07:51 AM
- Tagged How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 07:51 AM
- Tagged How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 07:51 AM
- Tagged How to hide dashboard panel ONLY when search results are zero? on Dashboards & Visualizations. 11-01-2016 07:51 AM
- Posted Re: How do I hide panel when "no results found" text is displayed on dashboard on Dashboards & Visualizations. 11-01-2016 07:47 AM
- Posted Re: How do I hide panel when "no results found" text is displayed on dashboard on Dashboards & Visualizations. 10-31-2016 01:53 PM
- Posted Re: How do I hide panel when "no results found" text is displayed on dashboard on Dashboards & Visualizations. 10-31-2016 01:07 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 1 | |||
| 1 |
11-02-2016
07:48 AM
I still have't found a solution or a way for my code to work. Can I open a case for this issue?
I need to hide the dashboard panel ONLY when search results are zero. Currently, my dashboard is been hidden although search results are displayed.
Below is my code..please do take a look..
<title>Average % CPU Utilization</title>
<search>
<query>index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(EC2-CPUUtilization-Percent)[\w | ^:](?P<ec2cpu>[\w]+)" |stats avg(ec2cpu) as EC2_CPUUtilization</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<done>
<condition match="'job.resultCount' == 0">
<set token="hide_panel">true</set>
</condition>
<condition>
<unset token="hide_panel"></unset>
</done>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.text">Percent</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.chart">radialGauge</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">connect</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">all</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.placement">top</option>
</chart>
</panel>
... View more
11-01-2016
12:07 PM
Yes, I've tried done, but still doesn't work in my case. Is there a way to hide the panel when the search doesn't display any results.
Any other suggestions. This question is still NOT resolved.
... View more
11-01-2016
12:06 PM
Yeah..I've tried the above code. So, what happens is that my panel is hidden no matter the search results appear or not.
But, in my specific case, I would want my panel to be hidden ONLY when the search results do NOT display any results.
Any suggestions?
... View more
11-01-2016
08:50 AM
I've also tried using the below code too, but doesn't work..
<chart>
<title>Average % CPU Utilization</title>
<search>
<query>index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(EC2-CPUUtilization-Percent)[\w | ^:](?P<ec2cpu>[\w]+)" |stats avg(ec2cpu) as EC2_CPUUtilization</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<progress>
<condition match="'job.resultCount' == 0">
<set token="hide_panel">true</set>
</condition>
<condition>
<unset token="hide_panel"></unset>
</condition>
</progress>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.text">Percent</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.chart">radialGauge</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">connect</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">all</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.placement">top</option>
</chart>
</panel>
... View more
11-01-2016
08:24 AM
Yes, I am using rejects in my code. But, currently my panel is hidden although search results are NOT zero. I want my panel to be hidden only when the search results are "ZERO".
... View more
11-01-2016
08:23 AM
I am using Splunk Version 6.3.2
... View more
11-01-2016
08:21 AM
**
CPU
Average % CPU Utilization
index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(EC2-CPUUtilization-Percent)\w | ^:" |stats avg(ec2cpu) as EC2_CPUUtilization
$field1.earliest$
$field1.latest$
true
ellipsisNone
0
visible
Percent
visible
visible
linear
linear
0
inherit
radialGauge
50
10
area
connect
none
0.01
default
shiny
all
0
0
ellipsisMiddle
top
**
... View more
11-01-2016
07:53 AM
The below code got cut off..which is above the chart
... View more
11-01-2016
07:51 AM
Currently my dashboard panel is hidden even when the search results are displayed.
I would like my dashboard panel to be hidden ONLY when the search results are zero and my panel should be displayed when the search results are displayed. How can I incorporate code for it?
<chart>
<title>Average % CPU Utilization</title>
<search>
<query>index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(EC2-CPUUtilization-Percent)[\w | ^:](?P<ec2cpu>[\w]+)" |stats avg(ec2cpu) as EC2_CPUUtilization</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<done>
<condition match="'job.resultCount' == 0">
<set token="hide_panel">true</set>
</condition>
<condition>
<unset token="hide_panel"></unset>
</condition>
</done>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.text">Percent</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.chart">radialGauge</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">connect</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">all</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.placement">top</option>
</chart>
</panel>
... View more
11-01-2016
07:47 AM
My dashboard panel is hidden right now although I do have search results.
I want my panel to be hidden ONLY when the search results are zero..can you please help?
Below is the code I am using
< panel rejects ="$hide_panel$">
Average % CPU Utilization
index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(EC2-CPUUtilization-Percent)\w | ^:" |stats avg(ec2cpu) as EC2_CPUUtilization
$field1.earliest$
$field1.latest$
true
... View more
10-31-2016
01:53 PM
Thank you cmerriman for the above code. This code hides the panel although my search results are displayed.
I would like to hide my dashboard panel ONLY when my search results are zero. Currently, I do have search results displayed and your above code hides the panel although the search results are NOT zero.
Can you please tell me what is wrong in here?
Thx for your help,
... View more
10-31-2016
01:07 PM
Didn't you want me to use reject instead of depends? Can you please provide the full code along with reject that worked for you. You've mentioned you were able to hide the panel. Can you please provide me the code where you were able to hide the panel?
... View more
10-31-2016
01:00 PM
Add the below reject for the above code before chart as well..
... View more
10-31-2016
12:58 PM
I tried the above as you've suggested and still didn't work. Am I doing anything wrong here?
<chart>
<title>Top % Disk Space Utilization</title>
<search>
<query>index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(Host-TopDiskSpaceUsageByPercent-Percent)[\w | ^:](?P<topdisk>[\w]+)" |stats avg(topdisk) as TopDiskSpaceUsage</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<done>
<condition match="'job.resultCount' == 0">
<set token="hide_panel">true</set>
</condition>
</done>
</search>
... View more
10-31-2016
11:54 AM
Tried your updated syntax, but my panel is still NOT hidden and I still do see the same result "no result found" on my panel...
<chart>
<title>Top % Disk Space Utilization</title>
<search>
<query>index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(Host-TopDiskSpaceUsageByPercent-Percent)[\w | ^:](?P<topdisk>[\w]+)" |stats avg(topdisk) as TopDiskSpaceUsage</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<progress>
<condition match="'job.resultCount' == 0">
<set token="hide_panel">true</set>
</condition>
<condition>
<unset token="hide_panel"></unset>
</condition>
</progress>
... View more
10-31-2016
11:42 AM
depends was used above chart..
Still doesn't work..can you tell me if I could use reject instead of depend? can you please help me with how reject could be used within my code?
... View more
10-31-2016
11:40 AM
Tried the below suggestion and still doesn't hide my panel..
you should set the code when the resultcount is 0
<progress>
<condition match="'job.resultCount' == 0">
<set token="hide_panel">true</set>
</condition>
<condition>
<unset token="hide_panel"></unset>
</condition>
</progress>
below is my updated code:
<chart>
<title>Top % Disk Space Utilization</title>
<search>
<query>index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(Host-TopDiskSpaceUsageByPercent-Percent)[\w | ^:](?P<topdisk>[\w]+)" |stats avg(topdisk) as TopDiskSpaceUsage</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<progress>
<condition match="'job.resultCount'== 0">
<set token="hide_panel">true</set>
</condition>
<condition>
<unset token="hide_panel"></unset>
</condition>
</progress>
... View more
10-31-2016
11:19 AM
Follow your comments and the panel is still not hidden, below is my code: Based on your code, you need to switch the set and unset lines. You should be setting the token when job.resultCount is not 0. Unless you are using rejects instead of depends, but you said you are using depends
<chart>
<title>Top % Disk Space Utilization</title>
<search>
<query>index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(Host-TopDiskSpaceUsageByPercent-Percent)[\w | ^:](?P<topdisk>[\w]+)" |stats avg(topdisk) as TopDiskSpaceUsage</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<progress>
<condition match="'job.resultCount' != 0">
<unset token="hide_panel"></unset>
</condition>
<condition>
<set token="hide_panel">true</set>
</condition>
</progress>
... View more
10-31-2016
11:01 AM
sorry got cut off again, but basically I do have the below depends in my code and my dashboard doesn't hide still.
... View more
10-31-2016
10:59 AM
Yes, I do have a depends statement in my code, got cut off during my cut paste.
This is my code..
<chart>
<title>Average % CPU Utilization</title>
<search>
<query>index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(EC2-CPUUtilization-Percent)[\w | ^:](?P<ec2cpu>[\w]+)" |stats avg(ec2cpu) as EC2_CPUUtilization</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<progress>
<condition match="'job.resultCount' == 0">
<unset token="hide_panel"></unset>
</condition>
<condition>
<set token="hide_panel">true</set>
</condition>
</progress>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.text">Percent</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.chart">radialGauge</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">connect</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">all</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.placement">top</option>
</chart>
</panel>
... View more
10-31-2016
10:42 AM
1 Karma
How do I hide my dashboard when I see "no results found" text displayed on my dashboard? I tried the code given by Splunk team on this website, but still didn't work.
Below is my code and doesn't hide the dashboard. I do see "no results found" text on my dashboard instead. Please do provide your inputs.
<chart>
<title>Average % CPU Utilization</title>
<search>
<query>index=eapi_cloud_system_qa $appname$ sourcetype=monitor OR sourcetype=monitor_log |rex field=_raw "(EC2-CPUUtilization-Percent)[\w | ^:](?P<ec2cpu>[\w]+)" |stats avg(ec2cpu) as EC2_CPUUtilization</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<progress>
<condition match="'job.resultCount' == 0">
<unset token="hide_panel"></unset>
</condition>
<condition>
<set token="hide_panel">true</set>
</condition>
</progress>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.text">Percent</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.chart">radialGauge</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">connect</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">all</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.placement">top</option>
</chart>
</panel>
Thx for your help
... View more
10-25-2016
10:31 AM
The above query given results in a row being displayed with 3 columns and 1 column displays no data found
... View more
10-25-2016
08:50 AM
Also, can you please help with the below as well?
How do I hide the panel when there are multiple columns in which time is one of them. By default time is being populated and the other columns display no data.
In this specific scenario where time, peakthreadcount, totalstartthreadcount columns are displayed within the search results, ONLY time is been populated with data and rest of the two columns display no data data at all. I would like to hide the panel ONLY when time is been populated and rest of the columns display no data.
How can this be accomplished?
Thx in advance
... View more
10-25-2016
08:35 AM
This doesn't help!
... View more
10-25-2016
08:33 AM
I incorporated the above code into my query. But didn't work.
index=eapi_cloud_system_qa id-swiftid-green-ITE-app sourcetype=monitor OR sourcetype=monitor_log | appendpipe [ stats count | eval "NoResults"="No Data Found" | where count=0 |table "NoResults"]|rex field=_raw "(EC2-CPUUtilization-Percent)\w | ^:" | rex field=_raw "(Host-ProcessCPUUtilization-Percent)\w | ^:" |chart values(ec2cpu) as EC2_CPUUtilization values(processcpu) AS Process_CPUUtilization by _time span=1m
... View more
