Dashboards & Visualizations

Can you favourite dashboards

jplumsdaine22
Influencer

I'm pretty sure I already know the answer to this, but thought I would throw it out there. Does anyone know of a way to favourite dashboards? (or indeed any group of knowledge objects)

For example if I have 700 saved searches, I'd love to be able to have a favourites list!

0 Karma
1 Solution

jplumsdaine22
Influencer

OK so the best I could do was advise users to create their own 'favourites dashboard' with following steps:
1. They have to maintain their own csv list (eg dashboardfaves.csv). The csv has a single column with the names of the dashboards they want to 'favourite'. They manage the lookup file themselves
2. They make their own dashboard panel with the query |inputlookup dashboardfaves.csv
3. They add the following drilldown tag to the dashboard

 <drilldown  target="My New Window">
      <link>
          $click.value$
      </link>
</drilldown>

Hacky but it works

View solution in original post

0 Karma

jplumsdaine22
Influencer

OK so the best I could do was advise users to create their own 'favourites dashboard' with following steps:
1. They have to maintain their own csv list (eg dashboardfaves.csv). The csv has a single column with the names of the dashboards they want to 'favourite'. They manage the lookup file themselves
2. They make their own dashboard panel with the query |inputlookup dashboardfaves.csv
3. They add the following drilldown tag to the dashboard

 <drilldown  target="My New Window">
      <link>
          $click.value$
      </link>
</drilldown>

Hacky but it works

0 Karma

jkat54
SplunkTrust
SplunkTrust

The short answer is no, you cant. Outside the box thinking says you need a naming convention.

I often name searches like below to achieve this.

0000 - {search name here}
SUMMARY INDEX SEARCH - SCHEDULED - DO NOT RUN - {search name here}
TEAM NAME HERE - SEARCH NAME HERE
etc.

0 Karma

jplumsdaine22
Influencer

That would be nice, but we have hundreds of users so any naming convention will fall apart in about a day 🙂

0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...