Re: Dynamic Text on Dashboard description Area.

nilanjankc · ‎03-21-2019

Is it possible to have some dynamic text in Dashboard description area, like current system time?
I am attaching the screen shot.
I am very new to Splunk ,it is my learning journey. Thank you for your help.

niketn · ‎03-21-2019

@nilanjankc try the following Run anywhere example.
1) You can use hideTitle="true" to hide the Splunk dashboard title.
2) Then use <html> panel to build your own dashboard header.
3) In another row add the inputs.
4) Create an independent search to find the current time and set it to token to be used to display the current time in the html panel.

PS: You can type /edit or /editxml after the dashboard title in the URL to bring up Dashboard UI Edit or Dashboard Edit XML respectively since the Edit button will also not show.

<form hideTitle="true">
  <label>Test</label>
  <description>Refresh Interval 15 Minutes</description>
  <search>
    <query>| makeresults
    | eval CurrentTime=strftime(_time,"%Y/%m/%d %H:%M:%S %p")
    </query>
    <earliest>-1s</earliest>
    <latest>now</latest>
    <progress>
      <set token="tokCurrentTime">$result.CurrentTime$</set>
    </progress>
  </search>
  <fieldset submitButton="false"></fieldset>
  <row>
    <panel>
      <html>
        <div>
          <h1>Test</h1>
          <p class="dashboard-header-description">Refresh Interval 15 Minutes - $tokCurrentTime$</p>
        </div>
      </html>
    </panel>
  </row>
  <row>
    <panel>
      <input type="time" token="field1">
        <label></label>
        <default>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </default>
      </input>
      <input type="dropdown" token="field2">
        <label>Business</label>
      </input>
    </panel>
  </row>
</form>

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

john_glasscock · ‎05-01-2019

@niketnilay Thank you for the answer above. I am in a similar situation, and can't figure out how to use your answer to display last months name in the description. I.E. I run a report on may 1 for totals for April. I want to display April, 2019 in the description. I can't figure out how to get the previous months value.

Thanks,
John

niketn · ‎05-01-2019

Hi @john.glasscock I am glad you found the answer useful. Do up-vote the answer/comment if it helped 🙂

As per you issue description you need to display Month name using token through an independent search. Please try out the following and use tokPreviousMonth for your dynamic description.

   <search>
     <query>| makeresults
| eval PreviousMonth=strftime(relative_time(_time,"-1mon@mon"),"%B")
     </query>
     <earliest>-1s</earliest>
     <latest>now</latest>
     <progress>
       <set token="tokPreviousMonth">$result.PreviousMonth$</set>
     </progress>
   </search>

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

Dynamic Text on Dashboard description Area.

.conf24 | Day 0

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

Troubleshooting the OpenTelemetry Collector