Dashboards & Visualizations

Can Splunk dashboards be called via REST API from another external reporting system?

skender27
Contributor

Hi everyone,

I am trying to provide a way for business people to have a Splunk dashboard in another system (basically a reporting system).
Is there a way via API calls to have one specific Splunk dashboard (which might be also be an html dashboard) into another external system?

Thanks for any suggestion,
Skender

0 Karma
1 Solution

dmaislin_splunk
Splunk Employee
Splunk Employee

Create any report with any type of chart, save it, then under the edit menu add a schedule to it. You can pick something like run every hour X minutes after the hour if you want it to run quickly to see the results. Then, under the edit menu again, select embed. A pop up window with an iframe is presented. Simply copy that iframe snippet into any HTML page and you are done. Because it is HTML and you can add as many scheduled reports as you like, you can really customize the HTML branding/crhome and style. You can also customize the size info in the iframe.

Here is what a generic looks like:

<html>
<iframe height="336" width="480" frameborder="0" src="http://localhost:8000/en-US/embed?s=%2FservicesNS%2Fadmin%2Fsearch%2Fsaved%2Fsearches%2FPlaces&oid=SLLKu8lxDX5GTjhwJ2rYnhmCuboOgsHdgS3ybTeYjlpu3yt%5EnipPtkX1Y4jqsD0ctENOSpbbKEXvf3j_wr5IxYpmerFGXPhXiHPAhP4Hn0WP7sIC1yIftskLPE0yhIfjEusW"></iframe>
</html>

alt text

View solution in original post

dmaislin_splunk
Splunk Employee
Splunk Employee

Create any report with any type of chart, save it, then under the edit menu add a schedule to it. You can pick something like run every hour X minutes after the hour if you want it to run quickly to see the results. Then, under the edit menu again, select embed. A pop up window with an iframe is presented. Simply copy that iframe snippet into any HTML page and you are done. Because it is HTML and you can add as many scheduled reports as you like, you can really customize the HTML branding/crhome and style. You can also customize the size info in the iframe.

Here is what a generic looks like:

<html>
<iframe height="336" width="480" frameborder="0" src="http://localhost:8000/en-US/embed?s=%2FservicesNS%2Fadmin%2Fsearch%2Fsaved%2Fsearches%2FPlaces&oid=SLLKu8lxDX5GTjhwJ2rYnhmCuboOgsHdgS3ybTeYjlpu3yt%5EnipPtkX1Y4jqsD0ctENOSpbbKEXvf3j_wr5IxYpmerFGXPhXiHPAhP4Hn0WP7sIC1yIftskLPE0yhIfjEusW"></iframe>
</html>

alt text

skender27
Contributor

Hi dmaislin,

So I understand that in order to be embedded, a report MUST be scheduled and so run (at least once) before.
I just tried it now. It works!

Thanks a lot,
Skender

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

Fantastic! Glad to help with a relatively unknown but great feature of Splunk!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

The surge in machine data is already hitting enterprise budgets, and the agentic era will only intensify it. ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...