I am a student and very new to Splunk so I need a help. I need to create a custom visualisation which includes creating a table from the search results. It shouldn't be a static table as I need to add some additional features to it. So table should be created and uploaded like a panel which can be used for the visualisation.
Please describe your use case more. What is special about your table? What "additional features" will it have? A mock-up might be helpful.
- For the below search which I have mentioned. I need to create a visualization in the form of table and it should not be the static table. Because later in the table I need to add colours and trends in it.
- This was the exact statement told for me with respect to the task: Render Splunk search results into a table ( Take the data supplied to updateView and render it into a html <table> )
index="_internal" sourcetype=splunkd source="*/license_usage.log" | bucket span=1d _time | stats sum(b) as value by st _time | eval series=strftime(_time, "%F") | rename st as category | fields - _time
No its not a exam question I am learning Splunk For my personal development. So I asked for some different topics from my senior and for this I couldn't find the solution as I am not understanding how to create or update the table.