Change Display Value In Mouse Hover

Change Display Value In Mouse Hover

Today we are back with another interesting dashboard customization.
Without wasting the time let’s get the business directly. So we have a dashboard called “Demo dashboard”.

As you can see that in the mouse hover it’s showing all of his projected values for the line chart.
But we want to change those values in the hover with our desired values. With “log_level” it’s either zero ( 0) or 1, so instead of zero (0) we want to display “CONNECT” and instead of 1, we want to display “DISCONNECT”.
The query of the given dashboard panel.

index=_internal sourcetype=splunkd log_level!="INFO" host=”sh”
| eval log_level=if(log_level="ERROR",0,1) 
| table _time log_level

So let’s start,
First of all, we need to create a javascript for the requirement
Go to the $SPLUNK_HOME$\etc\apps\<appName>\appserver\static
And create the “displayOver.js

If you want to download the sample js file please click here.
Then restart the splunk server.

# sudo /opt/splunk/bin/splunk restart

Now go back to your dashboard.
Click on “Edit” and “Source

Then do these modifications as shown below,

Within the <dashboard> or <form> tag add script=”displayOver.js” and add the chart id as mentioned in the js within the <chart> tag.
And also need to do some little changes to populate the hover properly.

You can also know about :  Define Single Value Trellis Visualization Color Based On Non-Numeric Field

Now save the dashboard and see the magic.

Happy Splunking!!

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.