Current Path :
/
opt
/
splunkforwarder
/
etc
/
system
/
default
/
Or
Select Your Path :
Upload File :
New :
File
Dir
//opt/splunkforwarder/etc/system/default/visualizations.conf
label = description = search_fragment = default_height = 250 default_width = 250 trellis_default_height = 400 allow_user_selection = True supports_trellis = False supports_drilldown = False supports_export = False data_sources = primary data_sources.primary.params.show_metadata = true # Splunk core visualizations - DO NOT EDIT [line] label = Line Chart description = Track values and trends over time. search_fragment = | timechart count [by comparison_category] default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = True supports_export = True supports_trellis = True core.icon = chart-line core.preview_image = line.png core.order = 1 core.type = visualizations core.viz_type = charting core.charting_type = line core.recommend_for = timechart, predict core.height_attribute = display.visualizations.chartHeight data_sources = primary,annotation data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 data_sources.annotation.params.output_mode = json_cols data_sources.annotation.params.count = 1000 [area] label = Area Chart description = Track changes in aggregated values over time. search_fragment = | timechart count [by comparison_category] default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = True supports_export = True supports_trellis = True core.icon = chart-area core.preview_image = area.png core.order = 2 core.type = visualizations core.viz_type = charting core.charting_type = area core.recommend_for = timechart core.height_attribute = display.visualizations.chartHeight data_sources = primary,annotation data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 data_sources.annotation.params.output_mode = json_cols data_sources.annotation.params.count = 1000 [column] label = Column Chart description = Compare values or fields. search_fragment = | stats count by comparison_category default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = True supports_export = True supports_trellis = True core.icon = chart-column core.preview_image = column.png core.order = 3 core.type = visualizations core.viz_type = charting core.charting_type = column core.recommend_for = timechart, top, rare core.height_attribute = display.visualizations.chartHeight data_sources = primary,annotation data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 data_sources.annotation.params.output_mode = json_cols data_sources.annotation.params.count = 1000 [bar] label = Bar Chart description = Compare values or fields. search_fragment = | stats count by comparison_category default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = True supports_export = True supports_trellis = True core.icon = chart-bar core.preview_image = bar.png core.order = 4 core.type = visualizations core.viz_type = charting core.charting_type = bar core.recommend_for = top, rare core.height_attribute = display.visualizations.chartHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 [pie] label = Pie Chart description = Compare categories in a dataset. search_fragment = | stats count by comparison_category default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = True supports_export = True supports_trellis = True core.icon = chart-pie core.preview_image = pie.png core.order = 5 core.type = visualizations core.viz_type = charting core.charting_type = pie core.recommend_for = top, rare core.height_attribute = display.visualizations.chartHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 [scatter] label = Scatter Chart description = Show relationships between discrete values in two dimensions. search_fragment = | stats x_value_aggregation y_value_aggregation by name_category [comparison_category] default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = True supports_export = True supports_trellis = True core.icon = chart-scatter core.preview_image = scatter.png core.order = 6 core.type = visualizations core.viz_type = charting core.charting_type = scatter core.height_attribute = display.visualizations.chartHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 [bubble] label = Bubble Chart description = Show relationships between discrete values in three dimensions. search_fragment = | stats x_value_aggregation y_value_aggregation size_aggregation by name_category [comparison_category] default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = True supports_export = True supports_trellis = True core.icon = chart-bubble core.preview_image = bubble.png core.order = 7 core.type = visualizations core.viz_type = charting core.charting_type = bubble core.height_attribute = display.visualizations.chartHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 [singlevalue] label = Single Value description = Track a metric with context and trends. search_fragment = | timechart count default_height = 115 default_width = 300 min_height = 50 min_width = 100 max_height = 10000 trellis_min_widths = 70, 130, 230 trellis_per_row = 10, 6, 4 supports_drilldown = True supports_export = True supports_trellis = True core.icon = single-value core.preview_image = singlevalue.png core.order = 8 core.type = visualizations core.viz_type = singlevalue core.recommend_for = timechart core.height_attribute = display.visualizations.singlevalueHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.offset = 0 data_sources.primary.params.count = 1000 [radialGauge] label = Radial Gauge description = Show a single value in relation to customized ranges. search_fragment = | stats count default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = False supports_export = True supports_trellis = True core.icon = gauge-radial core.preview_image = radialGauge.png core.order = 9 core.type = visualizations core.viz_type = charting core.charting_type = radialGauge core.height_attribute = display.visualizations.chartHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 [fillerGauge] label = Filler Gauge description = Show a single value and its current range. search_fragment = | stats count default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = False supports_export = True supports_trellis = True core.icon = gauge-filler core.preview_image = fillerGauge.png core.order = 10 core.type = visualizations core.viz_type = charting core.charting_type = fillerGauge core.height_attribute = display.visualizations.chartHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 [markerGauge] label = Marker Gauge description = Show a single value in relation to customized ranges. search_fragment = | stats count default_height = 300 default_width = 300 min_height = 100 min_width = 100 max_height = 10000 supports_drilldown = False supports_export = True supports_trellis = True core.icon = gauge-marker core.preview_image = markerGauge.png core.order = 11 core.type = visualizations core.viz_type = charting core.charting_type = markerGauge core.height_attribute = display.visualizations.chartHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.count = $display.visualizations.charting.data.count:JSCHART_RESULTS_LIMIT:10000$ data_sources.primary.params.offset = 0 [mapping] label = Cluster Map description = Show aggregated values in a geographic region. search_fragment = | geostats count [by category] latfield=lat longfield=lon default_height = 400 default_width = 600 min_height = 200 min_width = 100 max_height = 10000 supports_drilldown = True supports_export = True supports_trellis = False core.icon = location core.preview_image = mapping.png core.order = 12 core.type = visualizations core.viz_type = mapping core.mapping_type = marker core.recommend_for = geostats core.height_attribute = display.visualizations.mapHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.offset = 0 data_sources.primary.params.count = $display.visualizations.mapping.data.maxClusters:100$ data_sources.primary.mapping_filter = true data_sources.primary.mapping_filter.center = $display.visualizations.mapping.map.center:(0,0)$ data_sources.primary.mapping_filter.zoom = $display.visualizations.mapping.map.zoom:2$ data_sources.primary.params.search = geofilter south=$south$ west=$west$ north=$north$ east=$east$ maxclusters=$display.visualizations.mapping.data.maxClusters:100$ [choropleth] label = Choropleth Map description = Show how values vary over a geographic region. search_fragment = | stats count by featureId | geom geo_countries featureIdField=featureId default_height = 400 default_width = 300 min_height = 200 min_width = 100 max_height = 10000 supports_drilldown = True supports_export = True supports_trellis = True core.icon = choropleth-map core.preview_image = choropleth.png core.order = 13 core.type = visualizations core.viz_type = mapping core.mapping_type = choropleth core.recommend_for = geom core.height_attribute = display.visualizations.mapHeight data_sources = primary data_sources.primary.params.output_mode = json_cols data_sources.primary.params.offset = 0 data_sources.primary.params.count = $CHOROPLETH_SHAPE_LIMIT:10000$ data_sources.primary.mapping_filter = true data_sources.primary.mapping_filter.center = $display.visualizations.mapping.map.center:(0,0)$ data_sources.primary.mapping_filter.zoom = $display.visualizations.mapping.map.zoom:2$ data_sources.primary.params.search = geomfilter min_y=$south$ min_x=$west$ max_y=$north$ max_x=$east$ [statistics] label = Statistics Table description = Show results organized in rows and columns. default_height = 300 default_width = 300 min_height = 0 min_width = 100 max_height = 1000 supports_trellis = False supports_drilldown = True supports_export = True core.icon = table core.preview_image = statistics.png core.order = 14 core.type = statistics core.recommend_for = timechart, top, rare, predict data_sources = primary data_sources.primary.params.output_mode = json_rows data_sources.primary.params.sort_key = $display.statistics.sortColumn:$ data_sources.primary.params.sort_direction = $display.statistics.sortDirection:$ data_sources.primary.params.count = 20 data_sources.primary.params.offset = 0 [events] label = Events description = List events from search results. default_height = 300 default_width = 300 min_height = 0 min_width = 100 max_height = 1000 supports_trellis = False supports_drilldown = True supports_export = True core.icon = list core.preview_image = events.png core.order = 15 core.type = events
