Dashboards & Visualizations

Can I go directly from Dashboards to the backend data without going through technical statics page

mohammedk01
Explorer

Hi,
I have been presented with a test system with some dashboards on it and from the workflow in the test system I get taken to a technical “statistics” query page, then I click on a numerical value and select “view events” which then presents another technical looking page with the results within (albeit containing further information that what is ideally needed).

I’ve had a bit of a play and Splunk is not quite as easy as I’d hoped – the intent is to provide a simple way for end users to go from the dashboard to a simple listing of the records which make up the metric they have drilled from (i.e. a standard BI feature).

Is there a way to “clean” the UX up so that the end user can drill to detail without seeing these technical pages?

Tags (1)
0 Karma

tom_frotscher
Builder

Hi,

of course you can do that. The dashboards presented to you by the app are just build to let the user drilldown to another, more detailled dashboard. But you can create a new one, edit your dashboard (if you have the rights to do so), or copy the dashboard and edit it if you want.

What you need to do, is to edit the drilldown feature of the panel. You can decide where the drilldown is going. This can be an other dashboard, the raw data or you can have another panel open up on the same dashboard that shows further information.

For more information: https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/DrilldownIntro

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...