topic Re: Realtime dashboard in Dashboards & Visualizations

Realtime dashboard

Nith1 — Mon, 19 Jul 2021 06:13:25 GMT

Hi Team,

I have my logs for jira,bamboo and ucd in splunk with indexes like index=jira,index=bamboo and index=ucd for all these tools need to build a realtime dashboard .Can someone guide me how to show as a realtime dashboard

Thanks

Re: Realtime dashboard

gcusello — Mon, 19 Jul 2021 07:04:01 GMT

Hi @Nith1,

you have to run one by one the searches in your indexes (e.g. index=jira), applying each time the aggregations you like (stats, timechart, table, etc...), then you have to save each search in a different panel of a dashboard.

Then you have to add a Time Picker and correlate each panel to the Time Picker.

You could find and see in YouTube some videos that teach how to do this.

Ciao.

Giuseppe

Re: Realtime dashboard

Nith1 — Mon, 19 Jul 2021 07:13:30 GMT

Hi @gcusello

One more doubt please, whenever i do some modification in jira (eg:, i create an issue ) can i view the same in splunk dashboard at the sametime. I mean can i get a Realtime view for the same

Thanks

Re: Realtime dashboard

gcusello — Mon, 19 Jul 2021 07:20:11 GMT

Hi @Nith1,

if your Jira logs all the steps you do in it, the log is passed to Splunk.

If it's really in Real Time depends on the time to pass data from Jira to Splunk.

I don't know your need, but remember that a Real Time search like the one you described is very expensive in terms of resources, because each search in Splunk takes a CPU, so if you have a dashboard with three Real Time Searches, each dashboard continously uses three CPUs, so you have to correctly make a Capacity Plan for you infrastructure.

Otherwise you should analyze if you really need Real Time Searches or if you can run a search that updates results e.g. every five minutes.

Ciao.

Giuseppe