topic Re: Dynamic Dashboard in Dashboards & Visualizations

Dynamic Dashboard

hartfoml — Fri, 20 Jan 2012 15:40:29 GMT

I am monitoring the CPU use of the Splunk UF using WMI on my windows systems
I have this search;

source="WMI:LocalProcesses" Name=splunkd host="SYS20"| bucket _time span=1h | stats avg(PercentProcessorTime) AS "Average % CPU" by _time

this lets me see the Splunk UF CPU use over time for "sys20"

I can make this a dashboard without a problem.

My question is how do I make a dashboard with a pull-down list of "system names" and "Search time" so that I can make the dashboard available for system owners so they can see how much of the CPU resource Splunk is using on there system.

I have been using Splunk for 1 1/2 years and am at version 4.3 but I am not a developer.

Any help would be great.

Re: Dynamic Dashboard

stjack99 — Fri, 20 Jan 2012 19:46:45 GMT

You need to make a form instead of a dashboard. Oddly enough, I've started building almost the exact form you are, except I ran into a problem using the radial gauge. You can borrow my code and use it as a template, I posted it here: http://splunk-base.splunk.com/answers/38610/radial-gauge-not-showing-in-form. All you need to do is add the time selection to the fieldset section, and of course, change the queries to match what you want.

Everything there works except for the gauge.

Re: Dynamic Dashboard

hartfoml — Fri, 20 Jan 2012 19:55:46 GMT

Thanks I really appreciate the help

Now I need to read up on how to implement forms

I got you code. I'll let you know if I can figure out how to implement it.

Mike H.