Hi,
this is possible using sideview utils (2.4.10 in my case).
See the example below. This should run out of the box on any instance where the sideview is installed since it takes events from _internal index only.
Here we have a dashboard that is refreshed every minute using refresh="60". In the first step this dashboard will execute a short search against _internal index and get the first result, just to get the time when this dashboard has been refreshed. Then we calculate a new value based on the minute of the current time, so in this case we switch this value every 5 minutes from "First" to "Second".
Then we use the Switcher module to define 2 different charts with different searches. The first chart shows log_level of _internal logs as column chart, the second chart shows status values from _internal log as area chart.
So using this approach you can define any number of different searches, chart types or whatever you want, and select the appropriate chart based on any condition. For example, instead of switching the chart every 5 minutes you could change the chart based on the weather forecast or based Dow Jones values 🙂
Cheers
Norbert
<view autoCancelInterval="90" isVisible="true" objectMode="SimpleDashboard" onunloadCancelJobs="true" refresh="60" template="dashboard.html">
<label>Timeswitcher Dashboard</label>
<module name="AccountBar" layoutPanel="appHeader"/>
<module name="SideviewUtils" layoutPanel="appHeader"/>
<module name="AppBar" layoutPanel="navigationHeader"/>
<module name="DashboardTitleBar" layoutPanel="viewHeader"/>
<module name="URLLoader" layoutPanel="viewHeader" autoRun="True">
<module name="Search" layoutPanel="panel_row3_col1" autoRun="True">
<param name="search">
<![CDATA[
index=_internal | head 1 | addinfo | eval SwitcherValue=case(date_minute<=5,"First",date_minute<=10,"Second",date_minute<=15,"First",date_minute<=20,"Second",date_minute<=25,"First",date_minute<=30,"Second",date_minute<=35,"First",date_minute<=40,"Second",date_minute<=45,"First",date_minute<=50,"Second",date_minute<=55,"First",date_minute<=00,"Second") | table SwitcherValue
]]>
</param>
<module name="ResultsValueSetter">
<param name="fields">SwitcherValue</param>
<module name="Switcher" group=" ">
<param name="selectedGroup">$SwitcherValue$</param>
<module name="Search" layoutPanel="panel_row1_col1" group="First" autoRun="True" >
<param name="search">
index=_internal earliest=-15m latest=now() | timechart span=1min count by log_level
</param>
<module name="HiddenChartFormatter">
<param name="charting.chart">column</param>
<param name="charting.chart.stackMode">stacked</param>
<param name="charting.chart.nullValueMode">connect</param>
<param name="primaryAxisTitle.text">Time</param>
<module name="JSChart"></module>
</module>
</module>
<module name="Search" layoutPanel="panel_row1_col1" group="First" autoRun="True" >
<param name="search">
index=_internal earliest=-15m latest=now() | timechart span=1min count by status
</param>
<module name="HiddenChartFormatter">
<param name="charting.chart">area</param>
<param name="charting.chart.stackMode">stacked</param>
<param name="charting.chart.nullValueMode">connect</param>
<param name="primaryAxisTitle.text">Time</param>
<module name="JSChart"></module>
</module>
</module>
</module>
</module>
</module>
</module>
</view>
... View more