Splunk dashboard app has similar features and could refer that.
https://splunkbase.splunk.com/app/1603/
Very basic dashboard could be done as below
<form>
<label>Options</label>
<fieldset submitButton="false">
<input type="dropdown" token="sourcetype">
<label>Sourcetype</label>
<choice value="*">All</choice>
<default>*</default>
<initialValue>*</initialValue>
<fieldForLabel>sourcetype</fieldForLabel>
<fieldForValue>sourcetype</fieldForValue>
<search>
<query>index=_*|stats count by sourcetype</query>
<earliest>-4h@m</earliest>
<latest>now</latest>
</search>
</input>
</fieldset>
<row>
<panel>
<chart>
<search>
<query>index=_* sourcetype=$sourcetype$|stats count by index,sourcetype</query>
<earliest>-60m@m</earliest>
<latest>now</latest>
<done>
<set token="search_src">$job.search$</set>
</done>
</search>
<option name="charting.chart">column</option>
<option name="charting.chart.stackMode">stacked</option>
<option name="charting.drilldown">none</option>
<option name="charting.layout.splitSeries">0</option>
<option name="refresh.display">progressbar</option>
</chart>
</panel>
</row>
<row>
<panel>
<html>
<h2>Main Search</h2>
<hr></hr>
<p>$search_src$</p>
</html>
</panel>
</row>
</form>
---
What goes around comes around. If it helps, hit it with Karma 🙂
