Dashboards & Visualizations

Dashboard or view?

reedmohn
Communicator

I feel I've missed something obvious here, but can't figure out what:

  1. Perform a search
  2. Save it as a dashboard panel on a new dashboard.
  3. New "dashboard" shows up under "Views", not under "Dashboards".
  4. Feel stupid when you can't figure out why. We are running v6.2

Anyone?

0 Karma
1 Solution

markthompson
Builder

Solution; The user was not using the search & reporting app and was using a custom built app by a Splunk supplier.

Dashboards behave as normal once search & reporting is used.

View solution in original post

markthompson
Builder

Solution; The user was not using the search & reporting app and was using a custom built app by a Splunk supplier.

Dashboards behave as normal once search & reporting is used.

reedmohn
Communicator

Thanks for pointing me in the right direction, Mark.

0 Karma

markthompson
Builder

No problem, always happy to help 🙂 (Where I can anyway 😛 )

0 Karma

markthompson
Builder

What version of Splunk are you using?

0 Karma

reedmohn
Communicator

Ah.. tnx, should've added that: 6.2

Post updated.

0 Karma

markthompson
Builder

I take it this is the standard search & reporting app?

If so can you post some screenshots of when you created the dashboard and re-produce the steps so that we can see any mistakes that may have been made.

Thanks

0 Karma

reedmohn
Communicator

And..... there you have it!
It is not in the default search and reporting app. It's a custom app that our local Splunk supplier set up for us, to keep all our common / custom searches in.
I tried it in the default app now, and it behaves like expected there.

Then my question changes to: why is this behaviour different in the app?

While reading the about dashboards in the manual, I didn't see anything that pointed me in direction of understanding this. I suppose I need to read up more on custom apps....

0 Karma

markthompson
Builder

I'm not 100% sure what your custom app is expected to do, but I'll create an answer so you can accept it so that others know for the future.
don't forget to vote up

0 Karma

reedmohn
Communicator

Well.. it's not supposed to do too much. It's simply another, standard search app, but it's there to serve as placeholder for searches and reports that are published for everyone.

It's just a housekeeping / access control structure thing, really.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...