Splunk Search

Search results, dashboards and search bar on same dashboard page

splunker30039
Path Finder

I would like to create a dashboard that consists of 2 main parts:

1 - open search bar allowing any search 2 - results of searches that ran when dashboard was loaded, unrelated to 1).

I figure this is done with advanced views (what is the difference between a view and a dashboard?), but I could need some more pointers - e.g. basic structure/layout etc. to get started.

Thanks!!

Tags (2)

StefanB
Explorer

I am also struggeling with the difference of "view" and "dashboard".

For now on I can say when I have a "dashboard.xml" like this:

<view template="dashboard.html">
<module name="AccountBar" layoutPanel="appHeader"/>
<module name="AppBar" layoutPanel="navigationHeader"/>
<module name="SearchBar" layoutPanel="mainSearchControls">
    <module name="Paginator">
        <param name="entityName">events</param>
        <param name="count">10</param>
            <module name="EventsViewer">
        </module>
    </module>
</module>


<dashboard>
<label>Dashboard</label>

(here it does not display my row and html tags)

I found out that I have my searchpanel and paginator, but cannot use dashboard in advanced?

Please can anyone tell the real differences between view, dashboard, advanced view?

0 Karma

splunker30039
Path Finder

I did, went through the example UI stuff, but couldn't find anything that resolved my issue.

0 Karma

jrodman
Splunk Employee
Splunk Employee
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...