All Apps and Add-ons

How to alter or create dashboards using Sideview Utils in advanced XML if dashboards in Splunk 6.2 use Simple XML?

chengka
Explorer

Ok, I admit it. I feel like an idiot. Honestly I feel fairly comfortable with creating dashboards using Simple XML in v6.2, but even after watching and reading everything in SideView Utils I don't know how to start.

For example I would like to alter my dashboard to use Sideview Utils, but the editor won't import it since it uses Simple XML. Even the instructions about converting or viewing as Advanced XML have not helped.

What is the simplest way to create a dashboard/view using sideview modules? How do I edit advanced xml when it doesn't exist? Please help this lost soul.

1 Solution

sideview
SplunkTrust
SplunkTrust

I'm sorry that to date there is still no converter from Simple XML to Sideview XML. It's a pain.

The best answer right now though, is to rewrite the view from scratch. And for the first one you have to somewhat blindly trust that it wont take as long as it feels it will.

Either in a texteditor writing XML, or if that's not your style, using the Sideview Editor. If you have a couple pulldowns and a textfield and a search and chart, go crib from the Pulldown and TextField examples in the docs. If the examples aren't loading for you it most likely means that you're not an admin user on that system and thus you can't see the "_internal" index. (Install splunk and Utils locally but dont index any data, and you'll have a small but usable set of _internal data and the examples will run)

You'll get the hang of the manual conversion more quickly than you might think. And I can't promise to do the conversion for you, but I'll be happy to read any simple XML you send to nick [at] sideviewapps.com and I'll convert it if I can do it in a few minutes.

View solution in original post

0 Karma

sideview
SplunkTrust
SplunkTrust

I'm sorry that to date there is still no converter from Simple XML to Sideview XML. It's a pain.

The best answer right now though, is to rewrite the view from scratch. And for the first one you have to somewhat blindly trust that it wont take as long as it feels it will.

Either in a texteditor writing XML, or if that's not your style, using the Sideview Editor. If you have a couple pulldowns and a textfield and a search and chart, go crib from the Pulldown and TextField examples in the docs. If the examples aren't loading for you it most likely means that you're not an admin user on that system and thus you can't see the "_internal" index. (Install splunk and Utils locally but dont index any data, and you'll have a small but usable set of _internal data and the examples will run)

You'll get the hang of the manual conversion more quickly than you might think. And I can't promise to do the conversion for you, but I'll be happy to read any simple XML you send to nick [at] sideviewapps.com and I'll convert it if I can do it in a few minutes.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

The easiest way to create Sideview-enabled AdvancedXML views is through the Sideview Editor. You can open it from the Sideview Utils app, requires a recent non-LGPL version... but you'll want that anyway, the LGPL one is quite old indeed.

0 Karma

kmattern
Builder

I would suggest that you edit your dashboards in a text editor, I use EditPad Pro and then paste them into the Splunk editor. I'm running 6.2.1 and have many Advanced XML dashboards (I don't have any simple XML dashboards at all) and every one of my dashboards uses Sideview Utils.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!