Dashboards & Visualizations

Create a Block of Real-Time Updating Text?


I'm looking to create a visualization, much like you see in the Splunk for Palo Alto Networks app. The visualization seems pretty simple to me. It would be a block of text, with the following information.

Total Amount of Bandwith Used
Top Site: [Data Amount]
Top User: [Data Amount]
Top Application: [Data Amount]
Devices Passing Traffic: [Number]

I can make all the searches themselves, no problem. However, how would I go about creating a visualization that just displays the current number values in text that's not a table?

Tags (1)
0 Karma


To be honest, I think you may have answered your own question... if you have a look at the Palo Alto dashboard, and append ?showsource=1 to the end of the URL, you can see the code that was used to create that page.

Also, check out the "Splunk Dashbaord Examples" app, as well as the following documentation.


Hope this helps 🙂


That's awesome! I didn't know you could do that.

The only problem is I don't have permissions to create an XML file on the Splunk server, so I'd have to do it through Splunk Web. I'm not seeing a way to create a panel via XML on Splunk Web, unfortunately.

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...