Dashboards & Visualizations

How do I create a dashboard with the following visualizations and a form input for a user to change the time range?

Communicator

Hello,

I want to create a dashboard that has

  1. A line graph y-axis is time to finish and x-axis is a day
  2. Two boxes: one with # of begins and another box with # of completed
  3. Give the user an option to change the amount of time shown

What I am using for the dashboard is a file that has..

2015-05-22 00:5:02,318 INFO Begin Payment 
2015-05-22 00:10:17,090 INFO Finished Payment

It will be in that format... <Date> <time> <info or error> <name>

Right now I have a table that shows all the errors or failures so I used...

source="LOCATION" ERROR OR FAIL*
0 Karma
1 Solution

SplunkTrust
SplunkTrust

The visulization (chart and boxes[I'm hoping this is the single value panels you want]) can be created per your requirement. More details on the same here .http://docs.splunk.com/Documentation/Splunk/6.1.6/Viz/PanelreferenceforSimplifiedXML

For preparing the required data to be shown in these visualizations, you would have to write a search to generate the data. From the sample data, you would need to generate some sort of transaction (see transaction command here http://docs.splunk.com/Documentation/Splunk/6.1.6/SearchReference/Transaction).

View solution in original post

SplunkTrust
SplunkTrust

The visulization (chart and boxes[I'm hoping this is the single value panels you want]) can be created per your requirement. More details on the same here .http://docs.splunk.com/Documentation/Splunk/6.1.6/Viz/PanelreferenceforSimplifiedXML

For preparing the required data to be shown in these visualizations, you would have to write a search to generate the data. From the sample data, you would need to generate some sort of transaction (see transaction command here http://docs.splunk.com/Documentation/Splunk/6.1.6/SearchReference/Transaction).

View solution in original post

Communicator

Thank you somesoni2! Exactly what I needed

0 Karma

Communicator

@somesoni2 is there any way to do these graphs and tables without XML?

0 Karma

SplunkTrust
SplunkTrust

What version of Splunk you're using?

Communicator

6.1.6.2 is the version

0 Karma