@splunk/visualizations 27.0.0 → 27.2.0

package/Events.js

@@ -498,7 +498,7 @@ var withFixedSizeContainer = (Viz) => {
       FixSizeItem,
       {
         "data-test": "fix-size-item",
-        "data-splunk-visualization-version": "27.0.0 - 9bf093b7d",
+        "data-splunk-visualization-version": "27.2.0 - 2e7eda8d4",
         width,
         height,
         backgroundColor
@@ -564,7 +564,7 @@ var Cover = styled_components_default.div`
     bottom: 0;
 `;
 var Blocker = styled_components_default.div.attrs({
-  "data-splunk-visualization-version": "27.0.0 - 9bf093b7d"
+  "data-splunk-visualization-version": "27.2.0 - 2e7eda8d4"
 })`
     position: relative;
     width: 100%;
@@ -1077,6 +1077,25 @@ var getFeatureFlag = (context, flagName) => {
   return false;
 };
 
+// esm-externals:@splunk/visualizations-shared/trellisUtils
+var trellisUtils_exports = {};
+__export(trellisUtils_exports, {
+  default: () => trellisUtils_default
+});
+var defaultImport24 = __toESM(require("@splunk/visualizations-shared/trellisUtils"));
+__reExport(trellisUtils_exports, require("@splunk/visualizations-shared/trellisUtils"));
+var trellisUtils_default = "default" in defaultImport24 ? defaultImport24.default : defaultImport24;
+
+// src/common/utils/trellisUtils.ts
+var turnOffLegendDisplayWhenTrellisIsOn = (isTrellisOn, options) => {
+  if (isTrellisOn && !options.legendDisplay) {
+    return {
+      legendDisplay: "off"
+    };
+  }
+  return {};
+};
+
 // src/common/withDashboardViz.tsx
 var withDashboardViz = (opts) => {
   const {
@@ -1084,6 +1103,8 @@ var withDashboardViz = (opts) => {
     vizConfig,
     computeVizProps: computeVizProps2 = () => {
     },
+    computeVizPropsBeforeEval = () => {
+    },
     disableEditModeCover,
     useIconPlaceholder
   } = opts;
@@ -1133,14 +1154,26 @@ var withDashboardViz = (opts) => {
     const isDownsamplingEnabledByFeatureFlag = Boolean(
       featureFlagContext == null ? void 0 : featureFlagContext.visualizations_enableDownsampling
     );
+    const isTrellisFeatureFlagOn = Boolean(
+      featureFlagContext && featureFlagContext.visualizations_enableTrellis
+    );
+    const isTrellisOn = isTrellisFeatureFlagOn && ((_a = vizConfig == null ? void 0 : vizConfig.supports) == null ? void 0 : _a.includes("trellis" /* TRELLIS */)) && (options == null ? void 0 : options.splitByLayout) === "trellis" /* TRELLIS */;
     const isMounted = react_exports.useRef(true);
-    const optionsToEvaluate = react_exports.useMemo(
-      () => ({
+    const optionsToEvaluate = react_exports.useMemo(() => {
+      var _a2;
+      const legendDisplay = turnOffLegendDisplayWhenTrellisIsOn(isTrellisOn, options);
+      const computedOptions = (_a2 = computeVizPropsBeforeEval(options)) != null ? _a2 : {};
+      return {
         context: (0, lodash_exports.defaultsDeep)({}, context, vizConfig.defaultContext),
-        options: (0, hocUtils_exports.deepMergeWithArrayPrimitiveOverrides)({}, options, defaultOptions)
-      }),
-      [options, context]
-    );
+        options: (0, hocUtils_exports.deepMergeWithArrayPrimitiveOverrides)(
+          {},
+          legendDisplay,
+          computedOptions,
+          options,
+          defaultOptions
+        )
+      };
+    }, [isTrellisOn, options, context]);
     const [threshold, setThreshold] = react_exports.useState(Number(width));
     const onDownsamplingThresholdChange = react_exports.useCallback((newThreshold) => {
       setThreshold(newThreshold);
@@ -1221,11 +1254,8 @@ var withDashboardViz = (opts) => {
       useAsyncEvaluatedOptions
     ]);
     const evaluatedOptionsToUse = !useAsyncEvaluatedOptions ? evaluatedOptions : evaluatedOptionsAsync;
-    const isTrellisFeatureFlagOn = Boolean(
-      featureFlagContext && featureFlagContext.visualizations_enableTrellis
-    );
     let clonedEvaluatedOptions = evaluatedOptionsToUse;
-    if (isTrellisFeatureFlagOn && ((_a = vizConfig == null ? void 0 : vizConfig.supports) == null ? void 0 : _a.includes("trellis" /* TRELLIS */)) && (clonedEvaluatedOptions == null ? void 0 : clonedEvaluatedOptions.splitByLayout) === "trellis" /* TRELLIS */) {
+    if (isTrellisOn) {
       clonedEvaluatedOptions = __spreadProps(__spreadValues({}, evaluatedOptionsToUse), {
         backgroundColor: clonedEvaluatedOptions == null ? void 0 : clonedEvaluatedOptions.trellisBackgroundColor
       });
@@ -1331,508 +1361,50 @@ var withDashboardViz = (opts) => {
 };
 var withDashboardViz_default = withDashboardViz;
 
-// src/Events/docs/constants.js
-var rawEventPayload = {
-  preview: false,
-  init_offset: 0,
-  messages: [],
-  fields: [
-    {
-      name: "host"
-    },
-    {
-      name: "source"
-    },
-    {
-      name: "sourcetype"
-    },
-    {
-      name: "splunk_server"
-    },
-    {
-      name: "index"
-    },
-    {
-      name: "_raw"
-    },
-    {
-      name: "_time"
-    },
-    {
-      name: "eventtype"
-    },
-    {
-      name: "_eventtype_color"
-    },
-    {
-      name: "tag"
-    },
-    {
-      name: "linecount"
-    },
-    {
-      name: "_fulllinecount"
-    }
-  ],
-  results: [
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: `{"datetime":"07-16-2018 16:38:11.545 -0700","log_level":"INFO","component":"KVStoreServerStats","data":{"host":"ssingamneni-mbp13:8191","version":"3.4.9-splunk","process":"mongod","pid":21585,"uptime":20886,"uptimeMillis":20886042,"uptimeEstimate":20886,"localTime":1531784291541,"asserts":{"regular":0,"warning":0,"msg":0,"user":0,"rollovers":0},"backgroundFlushing":{"flushes":270,"total_ms":4429,"average_ms":16.403703703703705,"last_ms":27,"last_finished":1531784263582},"connections":{"current":9,"available":8183,"totalCreated":13},"dur":{"commits":28,"journaledMB":0,"writeToDataFilesMB":0,"compression":0,"commitsInWriteLock":0,"earlyCommits":0,"timeMs":{"dt":3013,"prepLogBuffer":0,"writeToJournal":0,"writeToDataFiles":0,"remapPrivateView":0,"commits":1,"commitsInWriteLock":0}},"extra_info":{"note":"fields vary by platform","page_faults":36543},"globalLock":{"totalTime":20885955000,"currentQueue":{"total":0,"readers":0,"writers":0},"activeClients":{"total":27,"readers":0,"writers":0}},"locks":{"Global":{"acquireCount":{"r":242994,"w":4136,"R":1,"W":5}},"MMAPV1Journal":{"acquireCount":{"r":127466,"w":4168,"R":149384,"W":190},"acquireWaitCount":{"w":28,"R":27},"timeAcquiringMicros":{"w":4320,"R":45261}},"Database":{"acquireCount":{"r":127257,"w":2479,"R":226,"W":36}},"Collection":{"acquireCount":{"R":105833,"W":573}},"Metadata":{"acquireCount":{"w":1906}},"oplog":{"acquireCount":{"R":21094,"W":1906}}},"network":{"bytesIn":4616571,"bytesOut":24319954,"physicalBytesIn":4616571,"physicalBytesOut":24319954,"numRequests":77719},"opLatencies":{"reads":{"latency":663793,"ops":17069},"writes":{"latency":12666524,"ops":569},"commands":{"latency":945488,"ops":21221}},"opcounters":{"insert":0,"query":17070,"update":569,"delete":0,"getmore":0,"command":21222},"opcountersRepl":{"insert":0,"query":0,"update":0,"delete":0,"getmore":0,"command":0},"repl":{"hosts":["127.0.0.1:8191"],"setName":"00BBEAFD-8B78-4F58-90B9-E7F3E9CBB249","setVersion":1,"ismain":true,"secondary":false,"primary":"127.0.0.1:8191","tags":{"all":"all","instance":"00BBEAFD-8B78-4F58-90B9-E7F3E9CBB249"},"me":"127.0.0.1:8191","electionId":{"$oid":"7fffffff000000000000000b"},"lastWrite":{"opTime":{"ts":{"$timestamp":{"t":1531784281,"i":2}},"t":11},"lastWriteDate":{"$date":1531784281000}},"rbid":673893},"security":{"SSLServerSubjectName":"O=SplunkUser,CN=SplunkServerDefaultCert","SSLServerHasCertificateAuthority":false,"SSLServerCertificateExpirationDate":{"$date":1622326898000}},"storageEngine":{"name":"mmapv1","supportsCommittedReads":false,"readOnly":false,"persistent":true},"mem":{"bits":64,"resident":123,"virtual":5307,"supported":true,"mapped":448,"mappedWithJournal":896},"metrics":{"commands":{"<UNKNOWN>":0,"_configsvrAddShard":{"failed":0,"total":0},"_configsvrAddShardToZone":{"failed":0,"total":0},"_configsvrBalancerStart":{"failed":0,"total":0},"_configsvrBalancerStatus":{"failed":0,"total":0},"_configsvrBalancerStop":{"failed":0,"total":0},"_configsvrCommitChunkMerge":{"failed":0,"total":0},"_configsvrCommitChunkMigration":{"failed":0,"total":0},"_configsvrCommitChunkSplit":{"failed":0,"total":0},"_configsvrMoveChunk":{"failed":0,"total":0},"_configsvrRemoveShardFromZone":{"failed":0,"total":0},"_configsvrSetFeatureCompatibilityVersion":{"failed":0,"total":0},"_configsvrUpdateZoneKeyRange":{"failed":0,"total":0},"_getUserCacheGeneration":{"failed":0,"total":0},"_isSelf":{"failed":0,"total":0},"_mergeAuthzCollections":{"failed":0,"total":0},"_migrateClone":{"failed":0,"total":0},"_recvChunkAbort":{"failed":0,"total":0},"_recvChunkCommit":{"failed":0,"total":0},"_recvChunkStart":{"failed":0,"total":0},"_recvChunkStatus":{"failed":0,"total":0},"_transferMods":{"failed":0,"total":0},"aggregate":{"failed":0,"total":0},"appendOplogNote":{"failed":0,"total":0},"applyOps":{"failed":0,"total":0},"authSchemaUpgrade":{"failed":0,"total":0},"authenticate":{"failed":0,"total":0},"availableQueryOptions":{"failed":0,"total":0},"buildInfo":{"failed":0,"total":0},"checkShardingIndex":{"failed":0,"total":0},"cleanupOrphaned":{"failed":0,"total":0},"clone":{"failed":0,"total":0},"cloneCollection":{"failed":0,"total":0},"cloneCollectionAsCapped":{"failed":0,"total":0},"collMod":{"failed":0,"total":0},"collStats":{"failed":0,"total":383},"compact":{"failed":0,"total":0},"connPoolStats":{"failed":0,"total":0},"connPoolSync":{"failed":0,"total":0},"connectionStatus":{"failed":0,"total":0},"convertToCapped":{"failed":0,"total":0},"copydb":{"failed":0,"total":0},"copydbgetnonce":{"failed":0,"total":0},"copydbsaslstart":{"failed":0,"total":0},"count":{"failed":0,"total":0},"create":{"failed":0,"total":0},"createIndexes":{"failed":0,"total":0},"createRole":{"failed":0,"total":0},"createUser":{"failed":0,"total":0},"currentOp":{"failed":0,"total":0},"currentOpCtx":{"failed":0,"total":0},"dataSize":{"failed":0,"total":0},"dbHash":{"failed":0,"total":0},"dbStats":{"failed":0,"total":0},"delete":{"failed":0,"total":0},"diagLogging":{"failed":0,"total":0},"distinct":{"failed":0,"total":0},"driverOIDTest":{"failed":0,"total":0},"drop":{"failed":0,"total":0},"dropAllRolesFromDatabase":{"failed":0,"total":0},"dropAllUsersFromDatabase":{"failed":0,"total":0},"dropDatabase":{"failed":0,"total":0},"dropIndexes":{"failed":0,"total":0},"dropRole":{"failed":0,"total":0},"dropUser":{"failed":0,"total":0},"eval":{"failed":0,"total":0},"explain":{"failed":0,"total":0},"features":{"failed":0,"total":0},"filemd5":{"failed":0,"total":0},"find":{"failed":0,"total":4088},"findAndModify":{"failed":0,"total":0},"forceerror":{"failed":0,"total":0},"fsync":{"failed":0,"total":0},"fsyncUnlock":{"failed":0,"total":0},"geoNear":{"failed":0,"total":0},"geoSearch":{"failed":0,"total":0},"getCmdLineOpts":{"failed":0,"total":3543},"getDiagnosticData":{"failed":0,"total":0},"getLastError":{"failed":0,"total":0},"getLog":{"failed":0,"total":0},"getMore":{"failed":0,"total":0},"getParameter":{"failed":0,"total":0},"getPrevError":{"failed":0,"total":0},"getShardMap":{"failed":0,"total":0},"getShardVersion":{"failed":0,"total":0},"getnonce":{"failed":0,"total":0},"grantPrivilegesToRole":{"failed":0,"total":0},"grantRolesToRole":{"failed":0,"total":0},"grantRolesToUser":{"failed":0,"total":0},"group":{"failed":0,"total":0},"handshake":{"failed":0,"total":0},"hostInfo":{"failed":0,"total":0},"insert":{"failed":0,"total":0},"invalidateUserCache":{"failed":0,"total":0},"isMain":{"failed":0,"total":4877},"killCursors":{"failed":0,"total":0},"killOp":{"failed":0,"total":0},"listCollections":{"failed":0,"total":220},"listCommands":{"failed":0,"total":0},"listDatabases":{"failed":0,"total":55},"listIndexes":{"failed":0,"total":0},"lockInfo":{"failed":0,"total":0},"logRotate":{"failed":0,"total":0},"logout":{"failed":0,"total":0},"mapReduce":{"failed":0,"total":0},"mapreduce":{"shardedfinish":{"failed":0,"total":0}},"mergeChunks":{"failed":0,"total":0},"moveChunk":{"failed":0,"total":0},"parallelCollectionScan":{"failed":0,"total":0},"ping":{"failed":0,"total":7692},"planCacheClear":{"failed":0,"total":0},"planCacheClearFilters":{"failed":0,"total":0},"planCacheListFilters":{"failed":0,"total":0},"planCacheListPlans":{"failed":0,"total":0},"planCacheListQueryShapes":{"failed":0,"total":0},"planCacheSetFilter":{"failed":0,"total":0},"profile":{"failed":0,"total":4},"reIndex":{"failed":0,"total":0},"renameCollection":{"failed":0,"total":0},"repairCursor":{"failed":0,"total":0},"repairDatabase":{"failed":0,"total":0},"replSetAbortPrimaryCatchUp":{"failed":0,"total":0},"replSetElect":{"failed":0,"total":0},"replSetFreeze":{"failed":0,"total":0},"replSetFresh":{"failed":0,"total":0},"replSetGetConfig":{"failed":0,"total":0},"replSetGetRBID":{"failed":0,"total":0},"replSetGetStatus":{"failed":0,"total":3816},"replSetHeartbeat":{"failed":0,"total":0},"replSetInitiate":{"failed":0,"total":0},"replSetMaintenance":{"failed":0,"total":0},"replSetReconfig":{"failed":0,"total":0},"replSetRequestVotes":{"failed":0,"total":0},"replSetStepDown":{"failed":0,"total":0},"replSetStepUp":{"failed":0,"total":0},"replSetSyncFrom":{"failed":0,"total":0},"replSetUpdatePosition":{"failed":0,"total":0},"resetError":{"failed":0,"total":0},"resync":{"failed":0,"total":0},"revokePrivilegesFromRole":{"failed":0,"total":0},"revokeRolesFromRole":{"failed":0,"total":0},"revokeRolesFromUser":{"failed":0,"total":0},"rolesInfo":{"failed":0,"total":0},"saslContinue":{"failed":0,"total":20},"saslStart":{"failed":0,"total":10},"serverStatus":{"failed":0,"total":602},"setFeatureCompatibilityVersion":{"failed":0,"total":0},"setParameter":{"failed":0,"total":0},"setShardVersion":{"failed":0,"total":0},"shardConnPoolStats":{"failed":0,"total":0},"shardingState":{"failed":0,"total":0},"shutdown":{"failed":0,"total":0},"splitChunk":{"failed":0,"total":0},"splitVector":{"failed":0,"total":0},"top":{"failed":0,"total":0},"touch":{"failed":0,"total":0},"unsetSharding":{"failed":0,"total":0},"update":{"failed":0,"total":569},"updateRole":{"failed":0,"total":0},"updateUser":{"failed":0,"total":0},"usersInfo":{"failed":0,"total":0},"validate":{"failed":0,"total":0},"whatsmyuri":{"failed":0,"total":0}},"cursor":{"timedOut":0,"open":{"noTimeout":0,"pinned":0,"total":0}},"document":{"deleted":0,"inserted":0,"returned":4101,"updated":569},"getLastError":{"wtime":{"num":569,"totalMillis":2},"wtimeouts":0},"operation":{"scanAndOrder":0,"writeConflicts":0},"queryExecutor":{"scanned":574,"scannedObjects":4670},"record":{"moves":0},"repl":{"executor":{"counters":{"eventCreated":6,"eventWait":6,"cancels":2,"waits":0,"scheduledNetCmd":0,"scheduledDBWork":2,"scheduledXclWork":0,"scheduledWorkAt":2,"scheduledWork":0,"schedulingFailures":0},"queues":{"networkInProgress":0,"dbWorkInProgress":0,"exclusiveInProgress":0,"sleepers":0,"ready":0,"free":3},"unsignaledEvents":0,"eventWaiters":0,"shuttingDown":false,"networkInterface":"\\nNetworkInterfaceASIO Operations' Diagnostic:\\nOperation:    Count:   \\nConnecting    0        \\nIn Progress   0        \\nSucceeded     0        \\nCanceled      0        \\nFailed        0        \\nTimed Out     0        \\n\\n"},"apply":{"attemptsToBecomeSecondary":1,"batches":{"num":0,"totalMillis":0},"ops":0},"buffer":{"count":0,"maxSizeBytes":268435456,"sizeBytes":0},"initialSync":{"completed":0,"failedAttempts":0,"failures":0},"network":{"bytes":0,"getmores":{"num":0,"totalMillis":0},"ops":0,"readersCreated":0},"preload":{"docs":{"num":0,"totalMillis":0},"indexes":{"num":0,"totalMillis":0}}},"storage":{"freelist":{"search":{"bucketExhausted":0,"requests":0,"scanned":0}}},"ttl":{"deletedDocuments":0,"passes":270}},"ok":1}}`
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=syslog_output, instantaneous_kbps=0, instantaneous_eps=0, average_kbps=0, total_k_processed=0, kb=0, ev=0"
-      },
-      _time: "2018-04-02T16:33:49.691-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.690 -0700 INFO  Metrics - group=thruput, name=index_thruput, instantaneous_kbps=0.8775484783935827, instantaneous_eps=3.0319205432969385, average_kbps=0.7287044552121656, total_k_processed=4798, kb=27.20703125, ev=94"
-      },
-      _time: "2018-04-02T16:33:49.690-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.690 -0700 INFO  Metrics - group=queue, name=typingqueue, max_size_kb=500, current_size_kb=0, current_size=0, largest_size=24, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.690-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.690 -0700 INFO  Metrics - group=queue, name=tcpin_queue, max_size_kb=500, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.690-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.690 -0700 INFO  Metrics - group=queue, name=stashparsing, max_size_kb=500, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.690-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.690 -0700 INFO  Metrics - group=queue, name=splunktcpin, max_size_kb=0, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.690-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.689 -0700 INFO  Metrics - group=queue, name=parsingqueue, max_size_kb=6144, current_size_kb=0, current_size=0, largest_size=2, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.689-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.689 -0700 INFO  Metrics - group=queue, name=nullqueue, max_size_kb=500, current_size_kb=0, current_size=0, largest_size=1, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.689-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.689 -0700 INFO  Metrics - group=queue, name=indexqueue, max_size_kb=500, current_size_kb=0, current_size=0, largest_size=74, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.689-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.689 -0700 INFO  Metrics - group=queue, name=httpinputq, max_size_kb=0, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.689-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.688 -0700 INFO  Metrics - group=queue, name=fschangemanager_queue, max_size_kb=5120, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.688-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.688 -0700 INFO  Metrics - group=queue, name=fifointernalq, max_size_kb=0, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.688-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.688 -0700 INFO  Metrics - group=queue, name=execprocessorinternalq, max_size_kb=500, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.688-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.688 -0700 INFO  Metrics - group=queue, name=auditqueue, max_size_kb=500, current_size_kb=0, current_size=0, largest_size=1, smallest_size=0",
-        trunc: false
-      },
-      _time: "2018-04-02T16:33:49.688-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.687 -0700 INFO  Metrics - group=queue, name=aggqueue, max_size_kb=1024, current_size_kb=0, current_size=0, largest_size=81, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.687-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.687 -0700 INFO  Metrics - group=queue, name=udp_queue, max_size_kb=0, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.687-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.687 -0700 INFO  Metrics - group=queue, name=aq, max_size_kb=10240, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.687-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: "04-02-2018 16:33:49.687 -0700 INFO  Metrics - group=queue, name=aeq, max_size_kb=500, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0"
-      },
-      _time: "2018-04-02T16:33:49.687-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    },
-    {
-      host: "jbreeden-mbpr15",
-      source: "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
-      sourcetype: "splunkd",
-      splunk_server: "jbreeden-mbpr15",
-      index: "_internal",
-      _raw: {
-        value: '04-02-2018 16:33:49.687 -0700 INFO  Metrics - group=per_sourcetype_thruput, series="splunkd_ui_access", kbps=0.07254104896811675, eps=0.5160714486728722, kb=2.2490234375, ev=16, avg_age=0.125, max_age=1'
-      },
-      _time: "2018-04-02T16:33:49.687-07:00",
-      tag: ["tag1", "tag2", "tag3"],
-      linecount: "1"
-    }
-  ],
-  highlighted: {
-    index: {
-      _internal: true
-    }
-  }
-};
-var columnsFromJSONArray = (fields, results) => {
-  const columns = fields.map(
-    ({ name }) => results.reduce((col, row) => {
-      col.push(row[name] === void 0 ? null : row[name]);
-      return col;
-    }, [])
-  );
-  return columns;
-};
-var originalDataSourceDataColumns = columnsFromJSONArray(
-  rawEventPayload.fields,
-  rawEventPayload.results
-);
-originalDataSourceDataColumns[5] = originalDataSourceDataColumns[5].map((_raw) => _raw.value);
-var dataSourceData = {
-  fields: rawEventPayload.fields,
-  columns: originalDataSourceDataColumns
-};
-var EMPTY_DATASOURCE = {
-  primary: {
-    requestParams: { offset: 0, count: 0 },
-    data: {
-      fields: [],
-      columns: []
-    },
-    meta: { totalCount: 0 }
-  }
-};
-
 // esm-externals:@splunk/visualization-icons
 var visualization_icons_exports = {};
 __export(visualization_icons_exports, {
   default: () => visualization_icons_default
 });
-var defaultImport24 = __toESM(require("@splunk/visualization-icons"));
+var defaultImport25 = __toESM(require("@splunk/visualization-icons"));
 __reExport(visualization_icons_exports, require("@splunk/visualization-icons"));
-var visualization_icons_default = "default" in defaultImport24 ? defaultImport24.default : defaultImport24;
+var visualization_icons_default = "default" in defaultImport25 ? defaultImport25.default : defaultImport25;
 
 // esm-externals:@splunk/visualization-icons/placeholders
 var placeholders_exports = {};
 __export(placeholders_exports, {
   default: () => placeholders_default
 });
-var defaultImport25 = __toESM(require("@splunk/visualization-icons/placeholders"));
+var defaultImport26 = __toESM(require("@splunk/visualization-icons/placeholders"));
 __reExport(placeholders_exports, require("@splunk/visualization-icons/placeholders"));
-var placeholders_default = "default" in defaultImport25 ? defaultImport25.default : defaultImport25;
+var placeholders_default = "default" in defaultImport26 ? defaultImport26.default : defaultImport26;
 
 // esm-externals:@splunk/visualization-schemas
 var visualization_schemas_exports = {};
 __export(visualization_schemas_exports, {
   default: () => visualization_schemas_default
 });
-var defaultImport26 = __toESM(require("@splunk/visualization-schemas"));
+var defaultImport27 = __toESM(require("@splunk/visualization-schemas"));
 __reExport(visualization_schemas_exports, require("@splunk/visualization-schemas"));
-var visualization_schemas_default = "default" in defaultImport26 ? defaultImport26.default : defaultImport26;
+var visualization_schemas_default = "default" in defaultImport27 ? defaultImport27.default : defaultImport27;
 
 // esm-externals:@splunk/themes
 var themes_exports = {};
 __export(themes_exports, {
   default: () => themes_default
 });
-var defaultImport27 = __toESM(require("@splunk/themes"));
+var defaultImport28 = __toESM(require("@splunk/themes"));
 __reExport(themes_exports, require("@splunk/themes"));
-var themes_default = "default" in defaultImport27 ? defaultImport27.default : defaultImport27;
+var themes_default = "default" in defaultImport28 ? defaultImport28.default : defaultImport28;
 
 // esm-externals:@splunk/visualizations-shared/configUtils
 var configUtils_exports = {};
 __export(configUtils_exports, {
   default: () => configUtils_default
 });
-var defaultImport28 = __toESM(require("@splunk/visualizations-shared/configUtils"));
+var defaultImport29 = __toESM(require("@splunk/visualizations-shared/configUtils"));
 __reExport(configUtils_exports, require("@splunk/visualizations-shared/configUtils"));
-var configUtils_default = "default" in defaultImport28 ? defaultImport28.default : defaultImport28;
+var configUtils_default = "default" in defaultImport29 ? defaultImport29.default : defaultImport29;
 
 // src/common/utils/configUtils.ts
 function enhanceConfig(vizConfig) {
@@ -1978,47 +1550,57 @@ var EventsViewer_exports = {};
 __export(EventsViewer_exports, {
   default: () => EventsViewer_default
 });
-var defaultImport29 = __toESM(require("@splunk/react-events-viewer/components/EventsViewer"));
+var defaultImport30 = __toESM(require("@splunk/react-events-viewer/components/EventsViewer"));
 __reExport(EventsViewer_exports, require("@splunk/react-events-viewer/components/EventsViewer"));
-var EventsViewer_default = "default" in defaultImport29 ? defaultImport29.default : defaultImport29;
+var EventsViewer_default = "default" in defaultImport30 ? defaultImport30.default : defaultImport30;
 
 // esm-externals:@splunk/themes/pick
 var pick_exports = {};
 __export(pick_exports, {
   default: () => pick_default
 });
-var defaultImport30 = __toESM(require("@splunk/themes/pick"));
+var defaultImport31 = __toESM(require("@splunk/themes/pick"));
 __reExport(pick_exports, require("@splunk/themes/pick"));
-var pick_default = "default" in defaultImport30 ? defaultImport30.default : defaultImport30;
+var pick_default = "default" in defaultImport31 ? defaultImport31.default : defaultImport31;
 
 // esm-externals:@splunk/visualization-context/EventsContext
 var EventsContext_exports = {};
 __export(EventsContext_exports, {
   default: () => EventsContext_default
 });
-var defaultImport31 = __toESM(require("@splunk/visualization-context/EventsContext"));
+var defaultImport32 = __toESM(require("@splunk/visualization-context/EventsContext"));
 __reExport(EventsContext_exports, require("@splunk/visualization-context/EventsContext"));
-var EventsContext_default = "default" in defaultImport31 ? defaultImport31.default : defaultImport31;
+var EventsContext_default = "default" in defaultImport32 ? defaultImport32.default : defaultImport32;
 
 // esm-externals:@splunk/react-ui/Menu
 var Menu_exports = {};
 __export(Menu_exports, {
   default: () => Menu_default
 });
-var defaultImport32 = __toESM(require("@splunk/react-ui/Menu"));
+var defaultImport33 = __toESM(require("@splunk/react-ui/Menu"));
 __reExport(Menu_exports, require("@splunk/react-ui/Menu"));
-var Menu_default = "default" in defaultImport32 ? defaultImport32.default : defaultImport32;
+var Menu_default = "default" in defaultImport33 ? defaultImport33.default : defaultImport33;
 
 // esm-externals:@splunk/time-range-utils/time
 var time_exports = {};
 __export(time_exports, {
   default: () => time_default
 });
-var defaultImport33 = __toESM(require("@splunk/time-range-utils/time"));
+var defaultImport34 = __toESM(require("@splunk/time-range-utils/time"));
 __reExport(time_exports, require("@splunk/time-range-utils/time"));
-var time_default = "default" in defaultImport33 ? defaultImport33.default : defaultImport33;
+var time_default = "default" in defaultImport34 ? defaultImport34.default : defaultImport34;
 
 // src/Events/EventUtils.ts
+var EMPTY_DATASOURCE = {
+  primary: {
+    requestParams: { offset: 0, count: 0 },
+    data: {
+      fields: [],
+      columns: []
+    },
+    meta: { totalCount: 0 }
+  }
+};
 var convertToPayloadFormat = (obj, initialValue = {}) => {
   if (!obj) return {};
   return Object.keys(obj).reduce((acc, curr) => {
@@ -2205,30 +1787,57 @@ var Popover_exports = {};
 __export(Popover_exports, {
   default: () => Popover_default
 });
-var defaultImport34 = __toESM(require("@splunk/react-ui/Popover"));
+var defaultImport35 = __toESM(require("@splunk/react-ui/Popover"));
 __reExport(Popover_exports, require("@splunk/react-ui/Popover"));
-var Popover_default = "default" in defaultImport34 ? defaultImport34.default : defaultImport34;
+var Popover_default = "default" in defaultImport35 ? defaultImport35.default : defaultImport35;
 
 // esm-externals:@splunk/react-ui/Markdown
 var Markdown_exports = {};
 __export(Markdown_exports, {
   default: () => Markdown_default
 });
-var defaultImport35 = __toESM(require("@splunk/react-ui/Markdown"));
+var defaultImport36 = __toESM(require("@splunk/react-ui/Markdown"));
 __reExport(Markdown_exports, require("@splunk/react-ui/Markdown"));
-var Markdown_default = "default" in defaultImport35 ? defaultImport35.default : defaultImport35;
+var Markdown_default = "default" in defaultImport36 ? defaultImport36.default : defaultImport36;
 
 // esm-externals:@splunk/react-field-summary/components/FieldSummary
 var FieldSummary_exports = {};
 __export(FieldSummary_exports, {
   default: () => FieldSummary_default
 });
-var defaultImport36 = __toESM(require("@splunk/react-field-summary/components/FieldSummary"));
+var defaultImport37 = __toESM(require("@splunk/react-field-summary/components/FieldSummary"));
 __reExport(FieldSummary_exports, require("@splunk/react-field-summary/components/FieldSummary"));
-var FieldSummary_default = "default" in defaultImport36 ? defaultImport36.default : defaultImport36;
+var FieldSummary_default = "default" in defaultImport37 ? defaultImport37.default : defaultImport37;
+
+// esm-externals:@splunk/react-ui/Button
+var Button_exports = {};
+__export(Button_exports, {
+  default: () => Button_default
+});
+var defaultImport38 = __toESM(require("@splunk/react-ui/Button"));
+__reExport(Button_exports, require("@splunk/react-ui/Button"));
+var Button_default = "default" in defaultImport38 ? defaultImport38.default : defaultImport38;
+
+// esm-externals:@splunk/react-icons/Cross
+var Cross_exports = {};
+__export(Cross_exports, {
+  default: () => Cross_default
+});
+var defaultImport39 = __toESM(require("@splunk/react-icons/Cross"));
+__reExport(Cross_exports, require("@splunk/react-icons/Cross"));
+var Cross_default = "default" in defaultImport39 ? defaultImport39.default : defaultImport39;
 
 // src/Events/PureEvents/FieldSummaryTooltip.tsx
-var popoverContainerStyle = { padding: "20px", width: 500 };
+var StyledContainer = styled_components_default.div`
+    padding: 20px;
+    width: 500px;
+    display: flex;
+    flex-direction: column;
+
+    > button {
+        align-self: end;
+    }
+`;
 var StyledMarkdown = styled_components_default(Markdown_default)`
     /* removes unnecessary margin on the internal paragraph component */
     p {
@@ -2256,7 +1865,8 @@ var FieldSummaryTooltip = (props) => {
     fieldName,
     fieldSummaryMap,
     onActionClicked,
-    onFieldValueClicked
+    onFieldValueClicked,
+    id
   } = props;
   const { isSplunkWebAvailable } = (0, react_exports.useContext)(EventsContext_default);
   const getActionsForField = (0, react_exports.useCallback)(
@@ -2276,9 +1886,19 @@ var FieldSummaryTooltip = (props) => {
       defaultPlacement: "below",
       anchor,
       takeFocus: true,
-      onRequestClose: handleTooltipClose
+      onRequestClose: handleTooltipClose,
+      id
     },
-    /* @__PURE__ */ react_exports.createElement("div", { style: popoverContainerStyle }, fieldSummaryExists ? /* @__PURE__ */ react_exports.createElement(
+    /* @__PURE__ */ react_exports.createElement(StyledContainer, null, /* @__PURE__ */ react_exports.createElement(
+      Button_default,
+      {
+        onClick: handleTooltipClose,
+        "data-test": "close-button",
+        appearance: "subtle",
+        icon: /* @__PURE__ */ react_exports.createElement(Cross_default, null),
+        "aria-label": (0, i18n_exports._)("Close")
+      }
+    ), fieldSummaryExists ? /* @__PURE__ */ react_exports.createElement(
       FieldSummary_default,
       {
         eventCount: field.count,
@@ -2297,7 +1917,8 @@ FieldSummaryTooltip.defaultProps = {
   fieldSummaryMap: {},
   handleTooltipClose: lodash_exports.noop,
   onActionClicked: lodash_exports.noop,
-  onFieldValueClicked: lodash_exports.noop
+  onFieldValueClicked: lodash_exports.noop,
+  id: ""
 };
 var FieldSummaryTooltip_default = FieldSummaryTooltip;
 
@@ -2306,63 +1927,54 @@ var ControlGroup_exports = {};
 __export(ControlGroup_exports, {
   default: () => ControlGroup_default
 });
-var defaultImport37 = __toESM(require("@splunk/react-ui/ControlGroup"));
+var defaultImport40 = __toESM(require("@splunk/react-ui/ControlGroup"));
 __reExport(ControlGroup_exports, require("@splunk/react-ui/ControlGroup"));
-var ControlGroup_default = "default" in defaultImport37 ? defaultImport37.default : defaultImport37;
-
-// esm-externals:@splunk/react-ui/Button
-var Button_exports = {};
-__export(Button_exports, {
-  default: () => Button_default
-});
-var defaultImport38 = __toESM(require("@splunk/react-ui/Button"));
-__reExport(Button_exports, require("@splunk/react-ui/Button"));
-var Button_default = "default" in defaultImport38 ? defaultImport38.default : defaultImport38;
+var ControlGroup_default = "default" in defaultImport40 ? defaultImport40.default : defaultImport40;
 
 // esm-externals:@splunk/react-ui/Text
 var Text_exports = {};
 __export(Text_exports, {
   default: () => Text_default
 });
-var defaultImport39 = __toESM(require("@splunk/react-ui/Text"));
+var defaultImport41 = __toESM(require("@splunk/react-ui/Text"));
 __reExport(Text_exports, require("@splunk/react-ui/Text"));
-var Text_default = "default" in defaultImport39 ? defaultImport39.default : defaultImport39;
+var Text_default = "default" in defaultImport41 ? defaultImport41.default : defaultImport41;
 
 // esm-externals:@splunk/react-ui/Message
 var Message_exports2 = {};
 __export(Message_exports2, {
   default: () => Message_default2
 });
-var defaultImport40 = __toESM(require("@splunk/react-ui/Message"));
+var defaultImport42 = __toESM(require("@splunk/react-ui/Message"));
 __reExport(Message_exports2, require("@splunk/react-ui/Message"));
-var Message_default2 = "default" in defaultImport40 ? defaultImport40.default : defaultImport40;
+var Message_default2 = "default" in defaultImport42 ? defaultImport42.default : defaultImport42;
 
 // esm-externals:@splunk/react-ui/Select
 var Select_exports = {};
 __export(Select_exports, {
   default: () => Select_default
 });
-var defaultImport41 = __toESM(require("@splunk/react-ui/Select"));
+var defaultImport43 = __toESM(require("@splunk/react-ui/Select"));
 __reExport(Select_exports, require("@splunk/react-ui/Select"));
-var Select_default = "default" in defaultImport41 ? defaultImport41.default : defaultImport41;
+var Select_default = "default" in defaultImport43 ? defaultImport43.default : defaultImport43;
 
 // esm-externals:@splunk/react-ui/Link
 var Link_exports = {};
 __export(Link_exports, {
   default: () => Link_default
 });
-var defaultImport42 = __toESM(require("@splunk/react-ui/Link"));
+var defaultImport44 = __toESM(require("@splunk/react-ui/Link"));
 __reExport(Link_exports, require("@splunk/react-ui/Link"));
-var Link_default = "default" in defaultImport42 ? defaultImport42.default : defaultImport42;
+var Link_default = "default" in defaultImport44 ? defaultImport44.default : defaultImport44;
 
 // esm-externals:@splunk/react-ui/Heading
 var Heading_exports = {};
 __export(Heading_exports, {
   default: () => Heading_default
 });
-var defaultImport43 = __toESM(require("@splunk/react-ui/Heading"));
+var defaultImport45 = __toESM(require("@splunk/react-ui/Heading"));
 __reExport(Heading_exports, require("@splunk/react-ui/Heading"));
-var Heading_default = "default" in defaultImport43 ? defaultImport43.default : defaultImport43;
+var Heading_default = "default" in defaultImport45 ? defaultImport45.default : defaultImport45;
 
 // src/Events/PureEvents/TimeControlsPopover.tsx
 var TimePopoverContainer = styled_components_default.div`
@@ -2401,12 +2013,18 @@ var NearbyValueRow = styled_components_default.div`
 var SectionHeading = styled_components_default(Heading_default)`
     margin-top: 20px;
 `;
+var HeadingContainer = styled_components_default.div`
+    display: grid;
+    grid-template-columns: auto auto;
+    justify-content: space-between;
+    align-items: center;
+`;
 var rangeTypeInputStyle = { minWidth: 80 };
 var rangeAmountInputStyle = { width: 54.88, minWidth: 48 };
 var rangeUnitInputStyle = { width: 154.88, textAlign: "center" };
 var applyButtonStyle = { marginLeft: 10 };
 var TimeControlsPopover = (props) => {
-  const { open, anchor, time, handleTooltipClose, onTimeDrilldown } = props;
+  const { open, anchor, time, handleTooltipClose, onTimeDrilldown, id } = props;
   const [rangeType, setRangeType] = react_exports.useState("plusminus");
   const [rangeAmount, setRangeAmount] = react_exports.useState("5");
   const [rangeUnit, setRangeUnit] = react_exports.useState("s");
@@ -2448,9 +2066,19 @@ var TimeControlsPopover = (props) => {
       defaultPlacement: "below",
       anchor,
       takeFocus: true,
-      onRequestClose: handleTooltipClose
+      onRequestClose: handleTooltipClose,
+      id
     },
-    /* @__PURE__ */ react_exports.createElement(TimePopoverContainer, { "data-test": "time-controls" }, /* @__PURE__ */ react_exports.createElement(Heading_default, { level: 2, className: "time-drilldown-header" }, "_time"), isInvalidInput && /* @__PURE__ */ react_exports.createElement(Message_default2, { type: "error", "data-test": "invalid-time-input-message" }, errorMessage), /* @__PURE__ */ react_exports.createElement(SectionHeading, { level: 4 }, (0, i18n_exports._)("Events Before or After")), /* @__PURE__ */ react_exports.createElement(TimeTable, null, /* @__PURE__ */ react_exports.createElement("tbody", null, /* @__PURE__ */ react_exports.createElement("tr", { className: "before-after-values" }, /* @__PURE__ */ react_exports.createElement("td", null, /* @__PURE__ */ react_exports.createElement(
+    /* @__PURE__ */ react_exports.createElement(TimePopoverContainer, { "data-test": "time-controls" }, /* @__PURE__ */ react_exports.createElement(HeadingContainer, null, /* @__PURE__ */ react_exports.createElement(Heading_default, { level: 2, className: "time-drilldown-header" }, "_time"), /* @__PURE__ */ react_exports.createElement(
+      Button_default,
+      {
+        onClick: handleTooltipClose,
+        "data-test": "close-button",
+        appearance: "subtle",
+        icon: /* @__PURE__ */ react_exports.createElement(Cross_default, null),
+        "aria-label": (0, i18n_exports._)("Close")
+      }
+    )), isInvalidInput && /* @__PURE__ */ react_exports.createElement(Message_default2, { type: "error", "data-test": "invalid-time-input-message" }, errorMessage), /* @__PURE__ */ react_exports.createElement(SectionHeading, { level: 4 }, (0, i18n_exports._)("Events Before or After")), /* @__PURE__ */ react_exports.createElement(TimeTable, null, /* @__PURE__ */ react_exports.createElement("tbody", null, /* @__PURE__ */ react_exports.createElement("tr", { className: "before-after-values" }, /* @__PURE__ */ react_exports.createElement("td", null, /* @__PURE__ */ react_exports.createElement(
       Link_default,
       {
         "data-test": "before-time",
@@ -2547,7 +2175,8 @@ TimeControlsPopover.defaultProps = {
   anchor: null,
   time: null,
   handleTooltipClose: lodash_exports.noop,
-  onTimeDrilldown: lodash_exports.noop
+  onTimeDrilldown: lodash_exports.noop,
+  id: ""
 };
 var TimeControlsPopover_default = TimeControlsPopover;
 
@@ -2801,6 +2430,8 @@ var PureEvents = (props) => {
       }
     });
   };
+  const fieldPopoverId = react_exports.useMemo(() => (0, id_exports.createDOMID)(), []);
+  const timePopoverId = react_exports.useMemo(() => (0, id_exports.createDOMID)(), []);
   return /* @__PURE__ */ react_exports.createElement(
     EventsContainer,
     {
@@ -2819,14 +2450,26 @@ var PureEvents = (props) => {
         onFieldClicked: handleFieldClicked,
         onFieldValueClicked: handleValueClicked,
         onTimeClicked: handleTimeClicked,
-        onTagClicked: handleTagClicked
+        onTagClicked: handleTagClicked,
+        fieldAdditionalProps: {
+          "aria-haspopup": true,
+          "aria-expanded": !!fieldSummaryAnchor && !!fieldSummaryField,
+          "aria-controls": fieldPopoverId
+        },
+        timeFieldAdditionalProps: {
+          "aria-haspopup": true,
+          "aria-expanded": !!timeFieldAnchor,
+          "aria-controls": timePopoverId
+        }
       }
     ), /* @__PURE__ */ react_exports.createElement(
       FieldSummaryTooltip_default,
       {
+        id: fieldPopoverId,
         open: !!fieldSummaryAnchor && !!fieldSummaryField,
         anchor: fieldSummaryAnchor,
         handleTooltipClose: () => {
+          fieldSummaryAnchor.firstChild.focus();
           setFieldSummaryField(null);
           setFieldSummaryAnchor(null);
         },
@@ -2838,11 +2481,13 @@ var PureEvents = (props) => {
     ), /* @__PURE__ */ react_exports.createElement(
       TimeControlsPopover_default,
       {
+        id: timePopoverId,
         open: !!timeFieldAnchor,
         anchor: timeFieldAnchor,
         time: timeValue,
         onTimeDrilldown: handleTimeDrilldown,
         handleTooltipClose: () => {
+          timeFieldAnchor.focus();
           setTimeValue(null);
           setTimeFieldAnchor(null);
         }