So here is what I am thinking. In a nutshell, I am looking to have a main dashboard which displays the status of multiple servers as well as display a status indicator for each of them to show the servers current "health". This "health" value would be derived ideally by a secondary dashboard which has multiple status indicators which work in a similar fashion, but are tied to one specific servers sub-systems. I may also incorporate another level that goes into the sub-systems similarly. However, lets just say I am only doing the two levels.
I am struggling to find a way to make the second sub-system level dashboards for each server, store and send their health values to the main dashboard so the color of the main dashboards status indicator can be determined for that specific server.
The intent is to have these dashboards on different screens throughout the office but also make following the issues easier. As in you just follow the drilldowns of the indicators showing an issue until you get to a diagnostic dashboard of some sort which can aid in troubleshooting.
Some Ideas:
I am quite open to suggestion. I have spent quite a while brainstorming and attempting to test different ideas to no avail.
I am using Splunk Enterprise version 8.1.2. Please let me know if you have any questions.
Thank you for taking the time to read this.
Consider using reports instead of in-line searches. If you put the same report in both dashboards they'll each see the same results.
I am currently experimenting with using reports per your suggestion though I don't know how I can access the result of multiple "input" reports on a dashboard to use in a single visualization so that I may create an overall health of all of the systems. I have some health reports created on the second lower level that I now have in my main dashboard. Do you have any suggestions on how to calculate the main health based on the lower levels health. If I can do that then I can make a flow of dashboards as deep as I need which is significantly more helpful.