Dashboards: Session 2 - Wed 4/19/23

Community Office Hours
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

Dashboards: Session 2 - Wed 4/19/23

Dashboards: Session 2 - Wed 4/19/23

5 Comments
Cover Images - Office Hours.png
Published on ‎02-23-2023 12:17 PM by Community Manager | Updated on ‎06-26-2023 02:43 PM

Register here and ask questions below this thread for the Office Hours session on Dashboards & Dashboard Studio on Wed, April 19, 2023 at 1pm PT / 4pm ET.

 

Join our bi-weekly Office Hour series where technical Splunk experts answer questions and provide how-to guidance on a different topic every month! This is your opportunity to ask questions related to your specific challenge or use case. This Office Hours session will cover anything from getting started with Dashboard Studio to advanced visualizations and how to migrate your dashboards from Classic to Dashboard Studio.

 

Please submit your questions below as comments in advance. You can also head to the #office-hours user Slack channel to ask questions (request access here). 

 

Pre-submitted questions with upvotes will be prioritized. After that, we will go in order of the questions posted below, then will open the floor up to live Q&A with meeting participants. If there’s a quick answer available, we’ll post as a direct reply.

 

Look forward to connecting!


adepp
Splunk Employee
Splunk Employee
‎04-06-2023 01:30 PM
‎04-06-2023 01:30 PM

Hey Everyone!

Drop your questions/comments here for any topics you'd like to see discussed in the Community Office Hours session (you can also head to the #office-hours user Slack channel to ask questions and join the discussion - request access here).

0 Karma
NondescriptUser
New Member
‎04-17-2023 12:51 PM
‎04-17-2023 12:51 PM

I would really love to talk through editing pre-built dashboards. Specifically, my question is around adding pickers/selectors which can interact with predefined tokens like Time. A specific example would be to clone and modify the "SOC Operations" Default ES Dashboard to adjust it with additional time slicing options, or to use the time picker instead of the default time widget already on the dashboard. Looking forward to this!

0 Karma
adepp
Splunk Employee
Splunk Employee
In response to NondescriptUser
‎04-20-2023 02:22 PM
‎04-20-2023 02:22 PM

Hey there! Unfortunately, the SOC Operations dashboard in ES is not editable at the moment. We recommend submitting a Splunk Idea request for this! Other documentation here:

You can, however, do this in Dashboard Studio! Watch the Office Hours recording (emailed to you) for a demo on how to use the time range picker and time tokens in Dashboard Studio. Also check out this documentation:

0 Karma
splunkuser320
Path Finder
‎04-17-2023 12:56 PM
‎04-17-2023 12:56 PM

Hi, I would like a demo of the drill-down. For example, if I user selects a value on the bar chart, then the rest of the graph should filter on a selected value.  Also is it possible to pass tokens from one dashboard to another?

0 Karma
adepp
Splunk Employee
Splunk Employee
In response to splunkuser320
‎04-21-2023 08:48 AM
‎04-21-2023 08:48 AM

Expert Solution:

  1. On the bar chart, configure a drilldown to "Set Tokens"
  2. Define a token name, then specify whether you want to use the selected field value, field name, or the value of another specified field.
  3. Then update the searches for your other charts to filter based on the token you defined.

Check out the Office Hours recording (emailed to you) for the full demo.

0 Karma