Kibana 7
I have a table visualisation with with a total column and two Unique counts. I now want to be able to drill down into the cells to see a further level of detail for each of those cells.
Signature Total SrcIPs DstIPs
ET POLICY Vulnerable Java Version 11.0.x Detected 1,507 9 9
The table is in a dashboard and I have created dashboards for the targets of the drill down. I added a drill down to the dashboard containing the table but I can't figure out how to attach this to a table cell and how the the filters get passed.
I.e. I want to click on the cell for the number of src IPs and have it display another table with a break down for that IP.
Click on the total cell take one to a dashboard that shows the individual alerts.
My searching finds docs saying it is possible but no explanations of how to do it.
It appears that with tables you can only do this with url drill downs and since they are not available on the basic license I am stuck.
Kibana will happily let you attach a dashboard drilldown to the table even though it won't work.
Related
I have a large text table (about 200k records) that's generated from a custom SQL query. I've added filters so users can limit the output, but the text table is still quite large, so rendering of the table is pretty slow. I know that I can limit the rows displayed using a calculated field like Index(). However, what if I want to limit the rows displayed to the user, but still enable them to pull the full dataset? In other words, lets say they filter by ID #123 and the text table has 5k records with ID #123. I want to display at most 100 of these records in the dashboard and if they need the complete raw data, they can pull the 5k into a crosstab. Currently, if I apply an Index to limit the rows displayed in the dashboard to 1k, they'll only be able to download 1k records to the dashboard.
Ultimately, the purpose is to make the raw data available, but make the experience using the dashboard a lot faster.
You could create a separate sheet purely for download. When downloading all of the records on the Detail shelf are exported - the fields don't need to be visible in the dashboard. Therefore you could create some form of dummy field - perhaps something simple like a SUM([Number of records]) - to display in the view with the remainder of the fields hidden on the Detail shelf. This means the view won't take an age to render but the fields will still export.
I will start of by saying that I'm new to Grafana.
I have a database table that is being updated externally that has say 15 columns of information on a given set of servers. I'm just trying to display the server name and current status and change the color of the row based on that status (Norm, Alert, Down) ... ideally those would be links to a detail page.
I tried the included table display which looks like it should handle it but the coloring options don't seem to work based on plain dumb text in a column or it would be perfect because it says it will color by row and includes the ability to make each row a link essentially.
grafana screen shot
I have tried with and without quotes in the Threshold values. It says in the hover help you can use comma separated values but does not seem to work for me. (I am thinking it's my config or usage btw)
Every other plugin I can find that says it wants to do this errors out when I tell it I have a table of data and not some live feed.
I have a report with the following structure:
PAGE HEADER
DETAIL BAND (12 of those)
SUMMARY BAND
The detail bands show depending on expressions I specified. Also, the content of the detail bands are subReports, one per detail band (don't know if that is relevant or not here).
What I'm trying to achieve is to execute the report without any filter as the ID or any other field of the table. Instead, I want to extract the information of all the registers of one specific table (let's name the table USER).
What I'm expecting to find when I execute the report is something like the following:
PAGE HEADER
detail sections (shown depending on the expressions )
SUMMARY
What I'm getting looks similar to the following:
PAGE HEADER
DETAIL 1 (for user1)
DETAIL 2 (for user1)
DETAIL 1 (for user2)
DETAIL 4 (for user3)
and never the summary band (just at the end of the report)
As you can see, all the users are getting mixed while what I want to do is to start a new page for each one of them.
QUESTIONS:
How can I get the report to show each one of the users from the table
in separate pages?
Is there some property I missed that allows me to
do that?
Thanks!
I think I found a way to solve this challenge. I just made a group (Group1) based on the ID's of the users and put the content of my Page Header inside the Group Header just created. Did the same with the Summary band, put all it contents inside the Group Footer.
Then, selecting the Group Header (or the Group Footer) I checked the Keep Together and the Start New Page checkboxs from the Appearance tab.
Furthermore, for each one of the detail bands, selected the Group1 just created for the Group Changes selection combo in the Appearance tab.
I didn't do much testing yet but it seems like it's working as I wanted it to. If I find any other (better) solution I'll update the answer. Still open to hear advices though.
I have 3 sheets I'd like to filter on the dashboard: months, supervisor name, and supervisee name. What I would like to do is have the functionality to click on a month, and have everything filter. I'd also like to click on the supervisor and supervisee, and have it do the same thing.
The problem is, that my supervisees keep disappearing every time I select a supervisor. The data is set up as a hierarchy within tableau and is on a corresponding line in the original hard data. Any help or suggestions?
Using IBM Bluemix I created an app, a Cloudant NoSQL DB, a dashDB and an Embeddable Reporting service. In dashDB I created a table with a couple of columns and some simple data. Next I configured the Embeddable Reporting service and pointed it to the Cloudant DB for its own storage and dashDB for reporting data. Next I open Report Studio and create a chart mapping in some data:
When I play the report page, I get an indication that I have not supplied data:
However if I create a different report and ask for a List ...
The list appears just fine ...
I am at a loss to understand why my chart will not appear but my list will. I will be happy to amend and update my question with any relevant information anyone may need.
Imagine a vertical column chart. Now imagine data of the form:
Dallas 10
New York 30
San Francisco 50
We can easily imagine the cities on the X-Axis and the values on the Y-Axis. This is easy enough. But now imagine that our X-Axis rows in our data are not unique ... for example:
West-Region 10
East-Region 30
West-Region 20
What then should the "value" of the West-Region column be? The column names should be unique and hence we can't have two columns with the same name. Should the value of the West-Region be 30 (the sum) or 15 (the average) or something else?
And that is where the problem comes in. When we define a column in a chart, there is no defined Aggregate Function. What we need to do is define how we want values to be aggregated together. If we select the column and select its properties, we can find an Aggregate Function option. We can choose a function such as Average.
Once defined, the chart will show up correctly because it can now properly handle aggregation. Now, this might seem strange especially if we know for certain that there is never a need for aggregation because values are unique ... but apparently, these are the rules (for better or worse) and, once set, charts now show: