Alerting

dashboard creation

kembgeorge
Loves-to-Learn

please can anyone help I need to create a dashboard based on a lookup file which will be updated every 30 minutes and the dashboard should have filters such as customer name etc. 

can anyone help please thanks. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

All dashboards start with a search.  Craft a query that fetches the desired information from the lookup file.  Once you are satisfied with the search, click the Save As link and choose "Dashboard panel".

If you get stuck, feel free to come back with specific questions.

---
If this reply helps you, Karma would be appreciated.
0 Karma

kembgeorge
Loves-to-Learn

I have already created the dashboard. but I have issues coming up with the drill down

please if you can even help me with the search query i will appriciate it. can I have your email please I really need help 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The original question should have mentioned it was about drilldowns. 

Please describe the issues you are having.  Explain the desired results, the actual results, and the steps/SPL used to achieve those results.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...