Create a Block of Real-Time Updating Text?

[tfitzgerald15]

I'm looking to create a visualization, much like you see in the Splunk for Palo Alto Networks app. The visualization seems pretty simple to me. It would be a block of text, with the following information.

Total Amount of Bandwith Used
Top Site: [Data Amount]
Top User: [Data Amount]
Top Application: [Data Amount]
Devices Passing Traffic: [Number]

I can make all the searches themselves, no problem. However, how would I go about creating a visualization that just displays the current number values in text that's not a table?

[rturk]

To be honest, I think you may have answered your own question... if you have a look at the Palo Alto dashboard, and append ?showsource=1 to the end of the URL, you can see the code that was used to create that page.

Also, check out the "Splunk Dashbaord Examples" app, as well as the following documentation.

http://docs.splunk.com/Documentation/Splunk/5.0.4/Viz/Exampledashboard#Configure_a_single_value_pane...

Hope this helps 🙂

[tfitzgerald15]

That's awesome! I didn't know you could do that.

The only problem is I don't have permissions to create an XML file on the Splunk server, so I'd have to do it through Splunk Web. I'm not seeing a way to create a panel via XML on Splunk Web, unfortunately.