Dashboards & Visualizations

Create a Block of Real-Time Updating Text?

tfitzgerald15
Explorer

I'm looking to create a visualization, much like you see in the Splunk for Palo Alto Networks app. The visualization seems pretty simple to me. It would be a block of text, with the following information.

Total Amount of Bandwith Used
Top Site: [Data Amount]
Top User: [Data Amount]
Top Application: [Data Amount]
Devices Passing Traffic: [Number]

I can make all the searches themselves, no problem. However, how would I go about creating a visualization that just displays the current number values in text that's not a table?

Tags (1)
0 Karma

rturk
Builder

To be honest, I think you may have answered your own question... if you have a look at the Palo Alto dashboard, and append ?showsource=1 to the end of the URL, you can see the code that was used to create that page.

Also, check out the "Splunk Dashbaord Examples" app, as well as the following documentation.

http://docs.splunk.com/Documentation/Splunk/5.0.4/Viz/Exampledashboard#Configure_a_single_value_pane...

Hope this helps 🙂

tfitzgerald15
Explorer

That's awesome! I didn't know you could do that.

The only problem is I don't have permissions to create an XML file on the Splunk server, so I'd have to do it through Splunk Web. I'm not seeing a way to create a panel via XML on Splunk Web, unfortunately.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...