topic Re: case - how to find the dashboard usage data in Dashboards & Visualizations

case - how to find the dashboard usage data

jibiuthaman — Fri, 07 Mar 2014 17:38:09 GMT

Comment: Usage of dashboard is a bad practice as this adds a lot of load to splunk.

My question: How do I validate this? I want to find in what frequency are dashboards being used. Most of the time people use them occasionally.

Another team want to run these queries regularly and move them to graphite to which I disagree.

Re: case - how to find the dashboard usage data

Ayn — Fri, 07 Mar 2014 19:09:19 GMT

Just a question: who is saying what? No, using dashboards is not "bad practice" because it's a vital part for many of using Splunk.

Re: case - how to find the dashboard usage data

somesoni2 — Fri, 07 Mar 2014 20:02:58 GMT

This query could be a start (not fine tuned)

index=_internal source=*access.log */app/* | rex "\/app\/(?<AppName>\w+)\/(?<ViewName>\w+)\"" | search AppName=* AND ViewName=* | table _time, AppName, ViewName, user

Re: case - how to find the dashboard usage data

martin_mueller — Fri, 07 Mar 2014 23:36:39 GMT

Take a look at the SoS app's UI and User Search Activity dashboard to get a quick view of what's being used when and how often: http://apps.splunk.com/app/748/

Re: case - how to find the dashboard usage data

jibiuthaman — Wed, 12 Mar 2014 17:22:04 GMT

I will try it out.

Re: case - how to find the dashboard usage data

jibiuthaman — Wed, 12 Mar 2014 17:22:54 GMT

Another team at office 🙂

Re: case - how to find the dashboard usage data

jibiuthaman — Wed, 12 Mar 2014 17:24:52 GMT

Thanks Martin. Will check

Re: case - how to find the dashboard usage data

jibiuthaman — Wed, 12 Mar 2014 21:25:44 GMT

I am a Splunk admin..and the view was created by me.. but looks like when others use, I don't see it being reported.

index=internal source=access.log */app/ | rex "\/app\/(?\w+)\/(?\w+)\"" | search AppName=* AND ViewName=S*_Env