Dashboards & Visualizations

How do I create a dashboard with the following visualizations and a form input for a user to change the time range?

alanxu
Communicator

Hello,

I want to create a dashboard that has

  1. A line graph y-axis is time to finish and x-axis is a day
  2. Two boxes: one with # of begins and another box with # of completed
  3. Give the user an option to change the amount of time shown

What I am using for the dashboard is a file that has..

2015-05-22 00:5:02,318 INFO Begin Payment 
2015-05-22 00:10:17,090 INFO Finished Payment

It will be in that format... <Date> <time> <info or error> <name>

Right now I have a table that shows all the errors or failures so I used...

source="LOCATION" ERROR OR FAIL*
0 Karma
1 Solution

somesoni2
Revered Legend

The visulization (chart and boxes[I'm hoping this is the single value panels you want]) can be created per your requirement. More details on the same here .http://docs.splunk.com/Documentation/Splunk/6.1.6/Viz/PanelreferenceforSimplifiedXML

For preparing the required data to be shown in these visualizations, you would have to write a search to generate the data. From the sample data, you would need to generate some sort of transaction (see transaction command here http://docs.splunk.com/Documentation/Splunk/6.1.6/SearchReference/Transaction).

View solution in original post

somesoni2
Revered Legend

The visulization (chart and boxes[I'm hoping this is the single value panels you want]) can be created per your requirement. More details on the same here .http://docs.splunk.com/Documentation/Splunk/6.1.6/Viz/PanelreferenceforSimplifiedXML

For preparing the required data to be shown in these visualizations, you would have to write a search to generate the data. From the sample data, you would need to generate some sort of transaction (see transaction command here http://docs.splunk.com/Documentation/Splunk/6.1.6/SearchReference/Transaction).

alanxu
Communicator

Thank you somesoni2! Exactly what I needed

0 Karma

alanxu
Communicator

@somesoni2 is there any way to do these graphs and tables without XML?

0 Karma

somesoni2
Revered Legend

What version of Splunk you're using?

alanxu
Communicator

6.1.6.2 is the version

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...