Add a list
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Add a list
The list panel displays search results in a list. It's particularly useful if you have a search that generates a set of fields you want to link to.
Configure the list panel
The following example creates a list of links for the to field in the Top recipients search. The
<list> tag specifies a list visualization. You must also specify the field to generate labels for the list and the field to populate the values. Use the
<option name="labelField"> to create a label for each item in the list and
<option name="valueField"> to generate values for each item.
<dashboard> <label>My dashboard</label> <row> <list> <searchName>Top recipients</searchName> <option name="labelField">to</option> <option name="valueField">to</option> </list> </row> </dashboard>
This example references a saved search called Top recipients. Make sure this saved search is shared with all users and roles who access this dashboard. Any saved search referenced in searchName must exist in
savedsearches.conf in the App's default or local directory or be set as global.
Configure list specific options
You can set other configuration options that are only available for list panels, such as the sort direction of the list and the search and view the list links to. For example, the following example sets the initial sort in descending order and links to another view from which to launch the search:
<dashboard> <label>My dashboard</label> <row> <list> <title>Top users</title> <searchString>host=production | top users</searchString> <option name="labelField">users</option> <option name="valueField">users</option> <option name="initialSortDir">desc</option> <option name="labelFieldTarget">My custom search view</option> </list> </row> </dashboard>
For basic configuration of lists, refer to the "List panel entry" in the Panel reference for Simplified XML.