Dashboards & Visualizations

How do I create a dashboard with the following visualizations and a form input for a user to change the time range?

alanxu
Communicator

Hello,

I want to create a dashboard that has

  1. A line graph y-axis is time to finish and x-axis is a day
  2. Two boxes: one with # of begins and another box with # of completed
  3. Give the user an option to change the amount of time shown

What I am using for the dashboard is a file that has..

2015-05-22 00:5:02,318 INFO Begin Payment 
2015-05-22 00:10:17,090 INFO Finished Payment

It will be in that format... <Date> <time> <info or error> <name>

Right now I have a table that shows all the errors or failures so I used...

source="LOCATION" ERROR OR FAIL*
0 Karma
1 Solution

somesoni2
SplunkTrust
SplunkTrust

The visulization (chart and boxes[I'm hoping this is the single value panels you want]) can be created per your requirement. More details on the same here .http://docs.splunk.com/Documentation/Splunk/6.1.6/Viz/PanelreferenceforSimplifiedXML

For preparing the required data to be shown in these visualizations, you would have to write a search to generate the data. From the sample data, you would need to generate some sort of transaction (see transaction command here http://docs.splunk.com/Documentation/Splunk/6.1.6/SearchReference/Transaction).

View solution in original post

somesoni2
SplunkTrust
SplunkTrust

The visulization (chart and boxes[I'm hoping this is the single value panels you want]) can be created per your requirement. More details on the same here .http://docs.splunk.com/Documentation/Splunk/6.1.6/Viz/PanelreferenceforSimplifiedXML

For preparing the required data to be shown in these visualizations, you would have to write a search to generate the data. From the sample data, you would need to generate some sort of transaction (see transaction command here http://docs.splunk.com/Documentation/Splunk/6.1.6/SearchReference/Transaction).

alanxu
Communicator

Thank you somesoni2! Exactly what I needed

0 Karma

alanxu
Communicator

@somesoni2 is there any way to do these graphs and tables without XML?

0 Karma

somesoni2
SplunkTrust
SplunkTrust

What version of Splunk you're using?

alanxu
Communicator

6.1.6.2 is the version

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...