- Splunk Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- How can I deploy a couple of dashboards from stage...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
In a search head clustered environment, how can I deploy a couple of dashboards from stage to prod?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It may as simple as creating the dashboard from Splunk Web UI of any search head or deploying the dashboard from the deployer (in case it's part of the app that's managed via deployer and you want to keep this dashboard read-only.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Assuming that prod and stage are separate systems your best bet might be to export the relevant app from stage and install/upgrade the version on prod.
If your on a recent version you can use the splunk package app command.
http://dev.splunk.com/view/SP-CAAAEMY#package
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Not sure about the app as I was asked to deploy these three dashboards only...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@somesoni2's solution will work a charm if all of the relevent knowledge objects are on the Prod system, but if the new dashboards have dependancies on eventtypes, fields, tags etc you might find that some of the panels may not render.
Try @somesoni2's idea first as its definatly the simplest, but if you find that the dashboards dont render you may need to move the whole app (or copy the conf files by hand)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Right right... it doesn't seem to be a best practice to move pieces of the app ; -)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It may as simple as creating the dashboard from Splunk Web UI of any search head or deploying the dashboard from the deployer (in case it's part of the app that's managed via deployer and you want to keep this dashboard read-only.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Great - I like the simple way of creating the dashboard from Splunk Web UI of any search head ; - )
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@somesoni2 - I can accept it as answer if you convert it to an answer...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Converted to answer 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you!
Introducing the Splunk Community Dashboard Challenge!
Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...
Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...
