Dashboards & Visualizations

How do I create a dashboard with the following visualizations and a form input for a user to change the time range?

alanxu
Communicator

Hello,

I want to create a dashboard that has

  1. A line graph y-axis is time to finish and x-axis is a day
  2. Two boxes: one with # of begins and another box with # of completed
  3. Give the user an option to change the amount of time shown

What I am using for the dashboard is a file that has..

2015-05-22 00:5:02,318 INFO Begin Payment 
2015-05-22 00:10:17,090 INFO Finished Payment

It will be in that format... <Date> <time> <info or error> <name>

Right now I have a table that shows all the errors or failures so I used...

source="LOCATION" ERROR OR FAIL*
0 Karma
1 Solution

somesoni2
SplunkTrust
SplunkTrust

The visulization (chart and boxes[I'm hoping this is the single value panels you want]) can be created per your requirement. More details on the same here .http://docs.splunk.com/Documentation/Splunk/6.1.6/Viz/PanelreferenceforSimplifiedXML

For preparing the required data to be shown in these visualizations, you would have to write a search to generate the data. From the sample data, you would need to generate some sort of transaction (see transaction command here http://docs.splunk.com/Documentation/Splunk/6.1.6/SearchReference/Transaction).

View solution in original post

somesoni2
SplunkTrust
SplunkTrust

The visulization (chart and boxes[I'm hoping this is the single value panels you want]) can be created per your requirement. More details on the same here .http://docs.splunk.com/Documentation/Splunk/6.1.6/Viz/PanelreferenceforSimplifiedXML

For preparing the required data to be shown in these visualizations, you would have to write a search to generate the data. From the sample data, you would need to generate some sort of transaction (see transaction command here http://docs.splunk.com/Documentation/Splunk/6.1.6/SearchReference/Transaction).

alanxu
Communicator

Thank you somesoni2! Exactly what I needed

0 Karma

alanxu
Communicator

@somesoni2 is there any way to do these graphs and tables without XML?

0 Karma

somesoni2
SplunkTrust
SplunkTrust

What version of Splunk you're using?

alanxu
Communicator

6.1.6.2 is the version

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...