Splunk Search

Search results, dashboards and search bar on same dashboard page

splunker30039
Path Finder

I would like to create a dashboard that consists of 2 main parts:

1 - open search bar allowing any search 2 - results of searches that ran when dashboard was loaded, unrelated to 1).

I figure this is done with advanced views (what is the difference between a view and a dashboard?), but I could need some more pointers - e.g. basic structure/layout etc. to get started.

Thanks!!

Tags (2)

StefanB
Explorer

I am also struggeling with the difference of "view" and "dashboard".

For now on I can say when I have a "dashboard.xml" like this:

<view template="dashboard.html">
<module name="AccountBar" layoutPanel="appHeader"/>
<module name="AppBar" layoutPanel="navigationHeader"/>
<module name="SearchBar" layoutPanel="mainSearchControls">
    <module name="Paginator">
        <param name="entityName">events</param>
        <param name="count">10</param>
            <module name="EventsViewer">
        </module>
    </module>
</module>


<dashboard>
<label>Dashboard</label>

(here it does not display my row and html tags)

I found out that I have my searchpanel and paginator, but cannot use dashboard in advanced?

Please can anyone tell the real differences between view, dashboard, advanced view?

0 Karma

splunker30039
Path Finder

I did, went through the example UI stuff, but couldn't find anything that resolved my issue.

0 Karma

jrodman
Splunk Employee
Splunk Employee
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...