<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Dashboard or view? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156275#M9603</link>
    <description>&lt;P&gt;What version of Splunk are you using?&lt;/P&gt;</description>
    <pubDate>Fri, 20 Feb 2015 14:03:40 GMT</pubDate>
    <dc:creator>markthompson</dc:creator>
    <dc:date>2015-02-20T14:03:40Z</dc:date>
    <item>
      <title>Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156274#M9602</link>
      <description>&lt;P&gt;I feel I've missed something obvious here, but can't figure out what:&lt;/P&gt;

&lt;OL&gt;
&lt;LI&gt;Perform a search&lt;/LI&gt;
&lt;LI&gt;Save it as a dashboard panel on a new dashboard.&lt;/LI&gt;
&lt;LI&gt;New "dashboard" shows up under "Views", not under "Dashboards".&lt;/LI&gt;
&lt;LI&gt;Feel stupid when you can't figure out why.
We are running v6.2&lt;/LI&gt;
&lt;/OL&gt;

&lt;P&gt;Anyone?&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 13:36:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156274#M9602</guid>
      <dc:creator>reedmohn</dc:creator>
      <dc:date>2015-02-20T13:36:30Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156275#M9603</link>
      <description>&lt;P&gt;What version of Splunk are you using?&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 14:03:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156275#M9603</guid>
      <dc:creator>markthompson</dc:creator>
      <dc:date>2015-02-20T14:03:40Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156276#M9604</link>
      <description>&lt;P&gt;Ah.. tnx, should've added that:  6.2&lt;/P&gt;

&lt;P&gt;Post updated.&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 14:45:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156276#M9604</guid>
      <dc:creator>reedmohn</dc:creator>
      <dc:date>2015-02-20T14:45:55Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156277#M9605</link>
      <description>&lt;P&gt;I take it this is the standard search &amp;amp; reporting app?&lt;/P&gt;

&lt;P&gt;If so can you post some screenshots of when you created the dashboard and re-produce the steps so that we can see any mistakes that may have been made.&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 14:49:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156277#M9605</guid>
      <dc:creator>markthompson</dc:creator>
      <dc:date>2015-02-20T14:49:46Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156278#M9606</link>
      <description>&lt;P&gt;And..... there you have it!&lt;BR /&gt;
It is not in the default search and reporting app. It's a custom app that our local Splunk supplier set up for us, to keep all our common / custom searches in.&lt;BR /&gt;
I tried it in the default app now, and it behaves like expected there.&lt;/P&gt;

&lt;P&gt;Then my question changes to:  why is this behaviour different in the app?&lt;/P&gt;

&lt;P&gt;While reading the about dashboards in the manual, I didn't see anything that pointed me in direction of understanding this.  I suppose I need to read up more on custom apps....&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 15:05:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156278#M9606</guid>
      <dc:creator>reedmohn</dc:creator>
      <dc:date>2015-02-20T15:05:16Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156279#M9607</link>
      <description>&lt;P&gt;I'm not 100% sure what your custom app is expected to do, but I'll create an answer so you can accept it so that others know for the future.&lt;BR /&gt;
don't forget to vote up&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 15:08:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156279#M9607</guid>
      <dc:creator>markthompson</dc:creator>
      <dc:date>2015-02-20T15:08:05Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156280#M9608</link>
      <description>&lt;P&gt;Solution; The user was not using the search &amp;amp; reporting app and was using a custom built app by a Splunk supplier.&lt;/P&gt;

&lt;P&gt;Dashboards behave as normal once search &amp;amp; reporting is used.&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 15:08:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156280#M9608</guid>
      <dc:creator>markthompson</dc:creator>
      <dc:date>2015-02-20T15:08:45Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156281#M9609</link>
      <description>&lt;P&gt;Well.. it's not supposed to do too much. It's simply another, standard search app, but it's there to serve as placeholder for searches and reports that are published for everyone.&lt;/P&gt;

&lt;P&gt;It's just a housekeeping / access control structure thing, really.&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 15:12:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156281#M9609</guid>
      <dc:creator>reedmohn</dc:creator>
      <dc:date>2015-02-20T15:12:46Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156282#M9610</link>
      <description>&lt;P&gt;Thanks for pointing me in the right direction, Mark.&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 15:14:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156282#M9610</guid>
      <dc:creator>reedmohn</dc:creator>
      <dc:date>2015-02-20T15:14:07Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard or view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156283#M9611</link>
      <description>&lt;P&gt;No problem, always happy to help &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt; (Where I can anyway &lt;span class="lia-unicode-emoji" title=":face_with_tongue:"&gt;😛&lt;/span&gt; )&lt;/P&gt;</description>
      <pubDate>Fri, 20 Feb 2015 15:20:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-or-view/m-p/156283#M9611</guid>
      <dc:creator>markthompson</dc:creator>
      <dc:date>2015-02-20T15:20:25Z</dc:date>
    </item>
  </channel>
</rss>

