advanced xml charting

[splunkpoornima]

hi ,

i used the below XML code to create the bar chart for the durtaion count of TaskAction and if we drilldown it should the trend chart..

plz verify this XML and give inputs.. after running this code..its shows Splunk encountered the following unknown module: "count of duration" . The view may not load properly.

Custom wiring the clicks

    <!-- we swap out the search to be a timechart.  -->
    <module name="HiddenSearch">
      <param name="search">source="C:\\Users\\20875\\Desktop\\taskmanager_log.txt"| transaction TaskAction startswith=START endswith=Succeeded|timechart count(duration) by TaskAction </param>
           <!-- this module will grab the value we clicked on and put it in as a searchterm,   series="someSourcetype".   -->
      <module name="ConvertToIntention">
        <param name="intention">
          <param name="name">addterm</param>
          <param name="arg">
   <param Value="TaskAction">$click.value$</param>
          </param>
 </param>

        <!-- finally, we render the search in another FlashChart, and we throw in a JobProgressIndicator for good measure. -->
        <module name="Count of Duration"></module>

        <!-- We throw in a header so we can tell the user what they clicked on. -->
        <module name="SimpleResultsHeader">
          <param name="entityName">results</param>
          <param name="headerFormat">Trendchart=$click.value$ $time$</param>
        </module>
        <module name="HiddenChartFormatter">
          <param name="chart">line</param>
          <param name="primaryAxisTitle.text">Time</param>
          <param name="secondaryAxisTitle.text">events per second</param>
          <param name="legend.placement">none</param>
          <module name="FlashChart">
            <param name="width">100%</param>
            <param name="height">160px</param>
          </module>
        </module>
      </module>
      </module>
    </module>
  </module>
</module>

pls provide inputs ..about wheather the above code is correct and also about the error

[Ayn]

Uh, well the error message says it really...you got a module in there called "Count of Duration":

 <module name="Count of Duration"/>

Like the error message says, there's no module called that, and I don't know really what you're trying to do there.

[bmacias84]

Here is a list of Modules. http://docs.splunk.com/Documentation/Splunk/latest/Developer/ModuleReference