I'm trying to create a dashboard with a bunch of 'traffic light' style indicators for stats like CPU load, memory use, free disk space, using the *NIX app to collect the data for me. The idea is then to be able to click on any of those indicators and get a graph for how that statistic has varied over the last 12 hours.
I'm just trying to get CPU Load working at the moment, and this is what i have so far. Please excuse typos because i'm manually typing from another system...
If i remove the <module name="HiddenSearch"> and everything underneath it, i get my nice colour coded SingleValue. If i reintroduce the HiddenSearch then I get the following message at the top of the page:
This view has a Splunk.Module.SingleValue module configured to push changes to downstream modules. This module never has any changes to push so this represents a configuration error.
and the page itself just displays the line graph that i hoped would only appear when the SingleValue was clicked.
Clearly I'm doing something wrong and trying to make SingleValue do something it shouldn't, but I'm quite stuck as to how to proceed from here.
Any tips would be greatly appreciated!
asked 22 Jul '11, 07:25
I think you can't drilldown from a SingleValue module in the way you're looking for. Take a look at this question: Drilldown link in dashboard on Splunk Answers
It might be a long road to walk, but you can probably get what you need by crafting your search into a simpleresultstable with the columns CPU, Disk, etc., so you can drilldown that way. It's much less visually attractive, though, obviously.
This might also help you get where you need to go (though it uses Sideview Utils, which is very valuable, but takes some time to learn): How to use Redirector with SingleValue on Splunk Answers
answered 22 Jul '11, 09:34