I want to display the number of sent data in certain time in the dashboard. I think the best way is with "Single Value".
How can I display the number of search results of a search in the dashboard?
For example my search ("message.additionalInfo.attributes.properties.receiver-market-partner-id"=12345678) finds 1500 events. How can I display the 1500 in the dashboard as a single value?
Thanks a lot!
Translated with www.DeepL.com/Translator (free version)
Hi @SimonSchoppel,
you have to create a search with a "stats count" statement at the end, something like this:
<your_search>
| stats count
In this way, you have as result a single number to display in a Single Value panel.
Ciao.
Giuseppe
Hi @SimonSchoppel,
you have to create a search with a "stats count" statement at the end, something like this:
<your_search>
| stats count
In this way, you have as result a single number to display in a Single Value panel.
Ciao.
Giuseppe
Thank you!!
Hi @SimonSchoppel,
good for you, see next time!
Please accept one answer for the other people of Community
Ciao and happy splunking
Giuseppe
P.S.: Karma Points are appreciated 😉