Dashboards & Visualizations

Looking for a method to display process progress in a dashboard

jwinderDDS
Path Finder

I have a process that I need to create a dashboard to monitor. The process logs to a file and contains easily searchable segment identifiers, such as:

Process started
Download started
bla
bla
Download completed
Import started
bla
bla
bla
Import completed
etc
etc

What is the best method of graphically displaying this on a dashboard? My thoughts were either a progress bar, or as a table listing each major step and an image that changes indicating the step's state (not started, running, finished). I haven't been able to figure out either one, although I got a lot closer on the table.

Any advice will be greatly appreciated!

Thank you in advance,

Jeremy

0 Karma
1 Solution

MuS
Legend

Hi jwinderDDS,

First get this messages into a field (let's say progress) using field extractions, see the docs for more details http://docs.splunk.com/Documentation/Splunk/6.3.2/Knowledge/ExtractfieldsinteractivelywithIFX
Next create a automatic lookup base on this new field using a lookup table like this:

progress,state
Process started,started
Download started,running
Download completed,running
Import started,running
Import completed,finished

See the docs for more details on lookups and how they work http://docs.splunk.com/Documentation/Splunk/6.3.2/Knowledge/Addfieldsfromexternaldatasources

Once this is setup you can display the state field in your dashboard.

Hope this helps to get you started ...

cheers, MuS

View solution in original post

0 Karma

MuS
Legend

Hi jwinderDDS,

First get this messages into a field (let's say progress) using field extractions, see the docs for more details http://docs.splunk.com/Documentation/Splunk/6.3.2/Knowledge/ExtractfieldsinteractivelywithIFX
Next create a automatic lookup base on this new field using a lookup table like this:

progress,state
Process started,started
Download started,running
Download completed,running
Import started,running
Import completed,finished

See the docs for more details on lookups and how they work http://docs.splunk.com/Documentation/Splunk/6.3.2/Knowledge/Addfieldsfromexternaldatasources

Once this is setup you can display the state field in your dashboard.

Hope this helps to get you started ...

cheers, MuS

0 Karma

jwinderDDS
Path Finder

Thank you!

After creating dummy events using https://answers.splunk.com/answers/47493/how-do-you-add-dummy-events-to-a-search-result.html I was able to create a table view that refreshes every 30 seconds that updates a column with each step's current state.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...