Dashboards & Visualizations

Is there any way to make Splunk dashboard panels more compact to fit more on one screen?

rickjury
Explorer

Is there any way to make splunk graphs in a dashboard more compact? It seems like no more than 3 across and a 2 down is about all that will fit on the screen.

I'm trying to replace another graphite based dashboard with Splunk, but I have the problem where on the other product, they can fit 12 highly detailed panels on one screen (for example the axis have tiny text or drop all titles etc). I guess I want to take all the non-essential stuff out and just leave a graph I can shrink down quite small, with any text in it in very small font.

I've messed about with a bunch of options in the xml, but none of them will get the result I'm aiming for.

Tags (4)
0 Karma

RMartinezDTV
Path Finder

I had this same issue when a boss complained about the size of Single Values in the newest version (v6.3.0).

You can use the "height" option for the panel:

option name="height" 50px

Unfortunately, you are limited to specifying an exact size in pixels. Also, Splunk Answers is killing my format but obviously you need the open and close tags for "option".

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

You can override CSS quite easily in Simple XML and HTML Dashboards (Advanced XML is deprecated and should be phased out). Place an application.css file in your $APP_HOME/appserver/static folder, and place the CSS overrides in that file. For example, to change the font size of a table view, place this into application.css:

.results-table .wrapped-results th, .results-table .wrapped-results td {
     font-size: 8px;
}

Everytime you edit that file, make sure you reload the web cache using the below url:

https://yoursplunk/en-US/_bump

Click the button to increase the bump version. For every part of the UI that you want to override, find the CSS class using an explorer of some kind (Chrome has Developer Tools) and put it into the application.css file. This can help reduce whitespace around elements to keep them compact.

For some Visualizations (such as bar/area/column charts), these are rendered in SVG, so CSS classes don't apply. For these you will have to use the standard editing controls to remove the Axis labels.

You can also create custom visualizations as @woodcock mentions.

woodcock
Esteemed Legend

There really isn't a good way to do it with Simple or Advanced XML other than using sparklines; have you tried them?

http://docs.splunk.com/Documentation/Splunk/6.2.4/Search/AddSparklinestoSearchResults

Other than that, you will have to build your own custom views with more direct control like with webframework:

http://dev.splunk.com/webframework

0 Karma

rickjury
Explorer

spark lines won't achieve the desired outcome. We have products here in use like datadog which we can easily have 30+ panels ( 6 x 5) on a single view and toggle between "tv" and normal modes so user's expectations are high in that respect.

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...