Dashboards & Visualizations

Does anyone know how to edit/create ITSI Entity Dashboard?

ksi_custr
Explorer

Hello,

Does anyone knows how to edit or create new entity dashboard like the screenshot below?

ksi_custr_0-1624335009547.png

 

Also, I can add dashboard on the entity, but I can't add auto filter based on entity title or alias. When I put $host$ on the search, the dashboard wont load. See below screenshot.

ksi_custr_1-1624335237226.png

 

Thanks in advance.

 

 

 

Labels (3)
Tags (3)
0 Karma

shandr
Path Finder

This question is answered here.

h/t @manu_giriyapp

host=forms.host_tok

shandr_0-1675916795389.png

 



0 Karma

yangqing123
Observer

I have same question too. Does anyone have a proper solution. Thanks

Tags (2)
0 Karma

evbright
New Member

I'm having the same question. I can add an xml dashboard to an entity type and it shows on the entity detail page, but I don't seem to get any tokens on this dashboard.  

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...