Dashboards & Visualizations

How to add the description for dashboard in beginning which looks good

splunklearner
Communicator
<form version="1.1" theme="light">
<label>Dashboard</label>
<!-- Hidden base search for dropdowns -->
<search id="base_search">
<query>
index=$index$ ----------
</query>
<earliest>$time_tok.earliest$</earliest>
<latest>$time_tok.latest$</latest>
</search>
<fieldset submitButton="false"></fieldset>
<row>
<panel>
<html>
<p>⚠️ Kindly avoid running the Dashboard for extended time frames <b>(Last 30 days)</b> unless absolutely necessary, as it may impact performance.</p>
<p>To get started, Please make sure to select your <b>Index Name</b> - this is required to display the dashboard data </p>
</html>
</panel>
</row>

This is how I am writing the description. But I am not satisfied because it is not eye catchy. When the user opens the dashboard he should see this note first, i want in that way. I am not aware of HTML as well. Can some one help me. Copied icon from google and it seems small in dashboard.

splunklearner_0-1753973750622.png

 

Labels (2)
0 Karma
1 Solution

livehybrid
SplunkTrust
SplunkTrust

@livehybrid wrote:

Hi @splunklearner 

Ive adjusted the styling now so its based on the Splunk theme colouring and adjusts for both:

livehybrid_0-1754083213956.png

 

Regarding the emoji and dark-mode, it seems to work okay for me. Occasionally when switching between light/dark mode I needed to do a hard refresh but it certainly looks to be working as per the above screenhot.

Below is the XML code the example dashboard:

<form version="1.1" theme="dark">
  <label>Dashboard</label>
  <fieldset submitButton="true" autoRun="false">
    <html>
      <div class="dashboard-row">
      <div class="dashboard-panel" style="border-left: 6px solid #f57c00; padding:10px; width:90%; box-shadow: 0 2px 6px rgba(255, 255, 255, 0.1);
    border-radius: 6px;">
  <h3 class="text-warning" style="display: flex; align-items: center; margin-bottom: 8px; color:#f57c00;">
    <span style="font-size: 32px; margin-right: 12px;">⚠️</span>
    Important Notice
  </h3>
  <p class="text-muted">
    Avoid long date ranges like <strong>Last 30 days</strong> to avoid performance bottlenecks.
  </p>
  <p class="text-muted">
    Please ensure an <strong>Index</strong> is selected before running this dashboard.
  </p>
</div>
</div>
    </html>
    <input type="dropdown" token="field1">
      <label>Index</label>
      <choice value="_internal">_internal</choice>
    </input>
    <input type="dropdown" token="field2">
      <label>Something else</label>
      <choice value="*">*</choice>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>|tstats count where index=_internal by host</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing


 

View solution in original post

splunklearner
Communicator

Thanks @livehybrid and @PrewinThomas for your help throughout. I want to select two solutions but not feasible. Upcoming stars... Kudos 👌

livehybrid
SplunkTrust
SplunkTrust

Hi @splunklearner 

This thread is getting hard to follow so I've edited this to include two variants, Ive adjusted the styling now so its based on the Splunk theme colouring and adjusts for both:

livehybrid_0-1754083213956.png

Below is the XML code the example dashboard:

 

<form version="1.1" theme="dark">
  <label>Dashboard</label>
  <fieldset submitButton="true" autoRun="false">
    <html>
      <div class="dashboard-row">
      <div class="dashboard-panel" style="border-left: 6px solid #f57c00; padding:10px; width:90%">
  <h3 class="text-warning" style="display: flex; align-items: center; margin-bottom: 8px; color:#f57c00;">
    <span style="font-size: 32px; margin-right: 12px;">⚠️</span>
    Important Notice
  </h3>
  <p class="text-muted">
    Avoid long date ranges like <strong>Last 30 days</strong> to avoid performance bottlenecks.
  </p>
  <p class="text-muted">
    Please ensure an <strong>Index</strong> is selected before running this dashboard.
  </p>
</div>
</div>
    </html>
    <input type="dropdown" token="field1">
      <label>Index</label>
      <choice value="_internal">_internal</choice>
    </input>
    <input type="dropdown" token="field2">
      <label>Something else</label>
      <choice value="*">*</choice>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>|tstats count where index=_internal by host</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

 

Regarding the emoji and dark-mode, it seems to work okay for me. Occasionally when switching between light/dark mode I needed to do a hard refresh but it certainly looks to be working as per the above screenhot.

*HOWEVER* below is a version which uses an embedded SVG image instead:

livehybrid_0-1754084269534.png

 

The code for that is:

<form version="1.1" theme="dark">
  <label>Dashboard</label>
  <fieldset submitButton="true" autoRun="false">
    <html>
      <div class="dashboard-row">
      <div class="dashboard-panel" style="border-left: 6px solid #f57c00; padding:10px; width:90%; box-shadow: 0 2px 6px rgba(255, 255, 255, 0.1);  border-radius: 6px;">
  <h3 class="text-warning" style="display: flex; align-items: center; margin-bottom: 8px; color:#f57c00;">
    <span style="font-size: 32px; margin-right: 12px;"><svg focusable="false" height="1.3em" width="1em" viewBox="0 0 1500 1313" aria-hidden="false" preserveAspectRatio="xMidYMid" xmlns="http://www.w3.org/2000/svg" data-test-name="warning-icon" class="warningIcon"><title>Warning</title><path style="fill:currentColor;" d="M.956 1196.326l668.58-1144.89C689.395 17.736 718.71 0 749.916 0c31.207 0 59.577 15.963 80.382 51.436l668.58 1144.89c7.565 12.416-23.642 116.174-77.544 116.174H85.474c-53.902 0-92.083-102.872-84.518-116.174zm643.333-684.743l32.146 257.167c4.908 39.264 34.086 74.685 69.815 91.187 36.612-16.018 64.87-50.826 69.914-91.187l32.146-257.167C855.18 456.623 815.582 411 759.7 411h-26.8c-55.908 0-95.555 45.033-88.61 100.583zm101.294 644.209c63.283 0 114.584-51.301 114.584-114.584 0-63.282-51.301-114.583-114.584-114.583-63.282 0-114.583 51.3-114.583 114.583s51.3 114.584 114.583 114.584z"></path></svg></span>
    Important Notice
  </h3>
  <p class="text-muted">
    Avoid long date ranges like <strong>Last 30 days</strong> to avoid performance bottlenecks.
  </p>
  <p class="text-muted">
    Please ensure an <strong>Index</strong> is selected before running this dashboard.
  </p>
</div>
</div>
    </html>
    <input type="dropdown" token="field1">
      <label>Index</label>
      <choice value="_internal">_internal</choice>
    </input>
    <input type="dropdown" token="field2">
      <label>Something else</label>
      <choice value="*">*</choice>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>|tstats count where index=_internal by host</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

Please let me know how you get on and if you need any other changes. 

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

PrewinThomas
Motivator

@splunklearner 

Can you try below, You can reduce font-size further if needed.

<dashboard version="1.1" theme="light">
<label>Your dashboard name</label>

<!-- ===== NOTICE PANEL ===== -->
<row>
<panel>
<html>
<style>
.compact-warning {
background-color: #fff3cd;
border-left: 4px solid #ffa500;
padding: 10px 15px;
font-family: Arial, sans-serif;
font-size: 13px;
margin-bottom: 5px;
border-radius: 4px;
max-width: 800px;
}
.compact-warning h3 {
color: #d9534f;
margin: 0 0 5px 0;
font-size: 12px;
}
.compact-warning p {
margin: 3px 0;
}
</style>

<div class="compact-warning">
<h3>⚠️ Performance Notice</h3>
<p><strong>Please avoid selecting long time ranges</strong> (e.g., <em>Last 30 days</em>) unless absolutely necessary, as it may impact dashboard performance.</p>
<p>Make sure to choose your <strong>Index Name</strong> to begin viewing data.</p>
</div>
</html>

</panel>
</row>

<!-- rest of your dashboard -->
</dashboard>

Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

0 Karma

livehybrid
SplunkTrust
SplunkTrust

hi @splunklearner 

How about this?

livehybrid_0-1753974236629.png

 

<dashboard version="1.1" theme="light">
  <label>Your dashboard name</label>

  <!-- ===== NOTICE PANEL ===== -->
  <row>
    <panel>
      <html>
        <div style="
            background: linear-gradient(120deg,#fff5f5 0%,#fff 100%);
            border-left: 6px solid #ff9800;
            box-shadow: 0 2px 6px rgba(0,0,0,.12);
            border-radius: 6px;
            padding: 18px 24px;
            font-family: -apple-system,BlinkMacSystemFont,Segoe UI,Helvetica,Arial,sans-serif;
            font-size: 15px;
            line-height: 1.45;">
          <h3 style="color:#d84315; margin:0 0 8px 0; display:flex; align-items:center;">
            <!-- unicode icon (search engine–friendly, scales with text size) -->
            <span style="font-size:32px; margin-right:12px;">⚠️</span>
            Performance notice
          </h3>
          <p style="margin:0 0 10px 0; color:#424242;">
            Avoid running the dashboard for long date ranges
            <strong>(Last 30 days)</strong> unless strictly needed – it may
            impact performance.
          </p>
          <p style="margin:0; color:#424242;">
            Before you continue, please select the <strong>Index Name</strong>
            above. The dashboard will remain empty until an index is chosen.
          </p>
        </div>
      </html>
    </panel>
  </row>

  <!-- rest of your dashboard -->
</dashboard>

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

splunklearner
Communicator

Performance notice text seems not aligned and want this box to be bit small (may be length wise) because I have nearly 10 Dropdowns and below that there is again text and panels. Because of this note which is bigger, panels are not visible initially. Users need to scroll down. Felt bit awkward for me

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @splunklearner 

Without your full dashboard code its going to be hard for me to make these changes blind, however if you have a look at the CSS within the code I provided there are a number of settings you can update, such as font-size which is currently 15px but could be changed down to 10px for much smaller text.

If this has been helpful please consider adding karma to the relevant posts.

Many thanks

Will

splunklearner
Communicator

splunklearner_0-1753974932070.png

This is how it is showing. Can you please format more the performance notice..

splunklearner_1-1753974996523.png

We have this as well below dropdowns. Any chance can we club all these all in one note...confused

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @splunklearner 

Sorry Im not following what you're asking for here, please could you clarify?

You can edit the HTML to say whatever you need, just apply the same styling as in the example.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

splunklearner
Communicator

I have one more problem here.. I want importance notice to be on the top. But here dropdowns are o n top. Tried to create a role and panel for dropdowns so that they will come below notice message but I am not able to give submit button clearly. Can someone help me with this?

splunklearner_0-1754024061260.png

 

0 Karma

PrewinThomas
Motivator

try below,

<form version="1.1" theme="light">
  <label>Dashboard</label>

  <!-- NOTICE PANEL FIRST -->
  <row>
    <panel>
      <html>
        <style>
          .notice-box {
            background-color: #fff3cd;
            border-left: 4px solid #ffa500;
            padding: 10px 15px;
            font-family: Arial, sans-serif;
            font-size: 13px;
            margin-bottom: 10px;
            border-radius: 4px;
          }
          .notice-box h3 {
            color: #d9534f;
            margin: 0 0 5px 0;
            font-size: 12px;
          }
        </style>
        <div class="notice-box">
          <h3>⚠️ Performance Notice</h3>
<p><strong>Please avoid selecting long time ranges</strong> (e.g., <em>Last 30 days</em>) unless absolutely necessary, as it may impact dashboard performance.</p>
<p>Make sure to choose your <strong>Index Name</strong> to begin viewing data.</p>
        </div>
      </html>
    </panel>
  </row>

  <!-- DROPDOWNS IN SEPARATE ROW -->
  <row>
    <panel>
      <input type="dropdown" token="index_tok" searchWhenChanged="false">
        <label>Select Index</label>
        <choice value="main">main</choice>
        <choice value="other">other</choice>
      </input>

      <input type="time" token="time_tok" searchWhenChanged="false">
        <label>Select Time Range</label>
        <default>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </default>
      </input>
    </panel>
  </row>

  <!-- SUBMIT BUTTON IN ITS OWN ROW -->
  <row>
    <panel>
      <fieldset submitButton="true" autoRun="false"/>
    </panel>
  </row>

  <!-- SEARCH AND RESULTS -->
  <search id="base_search">
    <query>index=$index_tok$ ...</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>

  <!-- Add your result panels here -->
</form>

Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

splunklearner
Communicator

splunklearner_0-1754024889323.png

@PrewinThomas  this is the error

0 Karma

PrewinThomas
Motivator

@splunklearner 
Your XML contains empty sections which is throwing warnings.
try below to highlight message and drop down samples.

<form version="1.1" theme="light">
  <label>Dashboard</label>

  <!-- NOTICE PANEL FIRST -->
  <row>
    <panel>
      <html>
        <style>
          .notice-box {
            background-color: #fff3cd;
            border-left: 4px solid #ffa500;
            padding: 10px 15px;
            font-family: Arial, sans-serif;
            font-size: 13px;
            margin-bottom: 10px;
            border-radius: 4px;
          }
          .notice-box h3 {
            color: #d9534f;
            margin: 0 0 5px 0;
            font-size: 12px;
          }
        </style>
        <div class="notice-box">
          <h3>⚠️ Performance Notice</h3>
<p><strong>Please avoid selecting long time ranges</strong> (e.g., <em>Last 30 days</em>) unless absolutely necessary, as it may impact dashboard performance.</p>
<p>Make sure to choose your <strong>Index Name</strong> to begin viewing data.</p>
        </div>
      </html>
    </panel>
  </row>

  <!-- DROPDOWNS IN SEPARATE ROW -->
  <row>
    <panel>
      <input type="dropdown" token="index_tok" searchWhenChanged="false">
        <label>Select Index</label>
        <choice value="main">main</choice>
        <choice value="other">other</choice>
      </input>

      <input type="time" token="time_tok" searchWhenChanged="false">
        <label>Select Time Range</label>
        <default>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </default>
      </input>
    </panel>
  </row>

 

  <!-- SEARCH AND RESULTS -->
  <search id="base_search">
    <query>index=$index_tok$ ...</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>

  <!-- Add your result panels here -->
</form>



0 Karma

splunklearner
Communicator

but I can't see the submit button in this XML

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @splunklearner 

Unfortunately its not possible to natively move the Submit button to anywhere other than the top of the screen and there can only be a single submit button per dashboard. See https://community.splunk.com/t5/Dashboards-Visualizations/Submit-button-per-panel-in-Simple-XML/td-p... for more info on this including workarounds - do you want me to see if we can make this approach work with your dashboard?

The only other alternative would be to have the message displayed below your input fields as per the original example, let me know!

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

splunklearner
Communicator

splunklearner_0-1754031764843.png

But when we use notice in here this notice is slightly overlapping with dropdowns which feels bad. Can you do something to maintain some space between them? 

<form version="1.1" theme="light">
  <label>Dashboard</label>
<fieldset submitButton="true" autoRun="false">
     <html>
        <div style="
            background: linear-gradient(120deg,#fff5f5 0%,#fff 100%);
            border-left: 6px solid #ff9800;
            box-shadow: 0 2px 6px rgba(0,0,0,.12);
            border-radius: 6px;
            padding: 18px 24px;
            font-family: -apple-system,BlinkMacSystemFont,Segoe UI,Helvetica,Arial,sans-serif;
            font-size: 15px;
            line-height: 1.45;">
          <h3 style="color:#d84315; margin:0 0 8px 0; display:flex; align-items:center;">
            <!-- unicode icon (search engine–friendly, scales with text size) -->
            <span style="font-size:32px; margin-right:12px;">⚠️</span>
            Important Notice
          </h3>
          <p style="margin:0 0 10px 0; color:#424242;">
            Avoid running the dashboard for long date ranges
            <strong>(Last 30 days)</strong> unless strictly needed – it may
            impact performance. Use shorter ranges for faster results.
          </p>
          <p style="margin:0; color:#424242;">
            Please ensure an <strong>Index Name</strong> is selected - this is required to load dashboard data.
          </p>
        </div>
      </html>
    <input type="dropdown" token="index">
      <label>Enter your Index Name</label>
      <fieldForLabel>index</fieldForLabel>
      <fieldForValue>index</fieldForValue>
      <search>

This is the XML currently using for this.... 

0 Karma

PrewinThomas
Motivator

@splunklearner 
You can add <div> block for that,

<form version="1.1" theme="light">
  <label>Dashboard</label>

  <fieldset submitButton="true" autoRun="false">
    <html>
      <div style="
          background: linear-gradient(120deg,#fff5f5 0%,#fff 100%);
          border-left: 6px solid #ff9800;
          box-shadow: 0 2px 6px rgba(0,0,0,.12);
          border-radius: 6px;
          padding: 18px 24px;
          font-family: -apple-system,BlinkMacSystemFont,Segoe UI,Helvetica,Arial,sans-serif;
          font-size: 15px;
          line-height: 1.45;
          margin-bottom: 24px;"> <!-- 👈 spacing between notice and dropdown -->
        <h3 style="color:#d84315; margin:0 0 8px 0; display:flex; align-items:center;">
          <span style="font-size:32px; margin-right:12px;">⚠️</span>
          Important Notice
        </h3>
        <p style="margin:0 0 10px 0; color:#424242;">
          Avoid running the dashboard for long date ranges
          <strong>(Last 30 days)</strong> unless strictly needed – it may
          impact performance. Use shorter ranges for faster results.
        </p>
        <p style="margin:0; color:#424242;">
          Please ensure an <strong>Index Name</strong> is selected - this is required to load dashboard data.
        </p>
      </div>
    </html>

Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

splunklearner
Communicator

splunklearner_0-1754033911183.png

Looks good but it look bit bad for dark mode. Can you help me with the good colors? sorry I am asking more

0 Karma

livehybrid
SplunkTrust
SplunkTrust

@livehybrid wrote:

Hi @splunklearner 

Ive adjusted the styling now so its based on the Splunk theme colouring and adjusts for both:

livehybrid_0-1754083213956.png

 

Regarding the emoji and dark-mode, it seems to work okay for me. Occasionally when switching between light/dark mode I needed to do a hard refresh but it certainly looks to be working as per the above screenhot.

Below is the XML code the example dashboard:

<form version="1.1" theme="dark">
  <label>Dashboard</label>
  <fieldset submitButton="true" autoRun="false">
    <html>
      <div class="dashboard-row">
      <div class="dashboard-panel" style="border-left: 6px solid #f57c00; padding:10px; width:90%; box-shadow: 0 2px 6px rgba(255, 255, 255, 0.1);
    border-radius: 6px;">
  <h3 class="text-warning" style="display: flex; align-items: center; margin-bottom: 8px; color:#f57c00;">
    <span style="font-size: 32px; margin-right: 12px;">⚠️</span>
    Important Notice
  </h3>
  <p class="text-muted">
    Avoid long date ranges like <strong>Last 30 days</strong> to avoid performance bottlenecks.
  </p>
  <p class="text-muted">
    Please ensure an <strong>Index</strong> is selected before running this dashboard.
  </p>
</div>
</div>
    </html>
    <input type="dropdown" token="field1">
      <label>Index</label>
      <choice value="_internal">_internal</choice>
    </input>
    <input type="dropdown" token="field2">
      <label>Something else</label>
      <choice value="*">*</choice>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>|tstats count where index=_internal by host</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing


 

splunklearner
Communicator

and can we have any eye catchy background for dark mode? if possible.

0 Karma

PrewinThomas
Motivator

@splunklearner 
This thread is getting harder to follow now. 
If you want to highlight important notice part, i have updated the xml.

<form version="1.1" theme="dark">
  <label>Dashboard</label>
  <fieldset submitButton="true" autoRun="false">
    <html>
      <style>
        @keyframes glowPulse {
          0% { box-shadow: 0 0 10px #f57c00; }
          50% { box-shadow: 0 0 20px #f57c00; }
          100% { box-shadow: 0 0 10px #f57c00; }
        }

        @keyframes bounceIn {
          0% { transform: scale(0.5); opacity: 0; }
          60% { transform: scale(1.2); opacity: 1; }
          100% { transform: scale(1); }
        }

        .warning-panel {
          animation: glowPulse 3s ease-in-out infinite;
          transition: box-shadow 0.3s ease;
        }

        .warning-panel:hover {
          box-shadow: 0 0 25px #ffa726;
        }

        .warningIcon {
          animation: bounceIn 0.8s ease-out;
        }
      </style>

      <div class="dashboard-row">
        <div class="dashboard-panel warning-panel" style="border-left: 6px solid #f57c00; padding:10px; width:90%; border-radius: 6px;">
          <h3 class="text-warning" style="display: flex; align-items: center; margin-bottom: 8px; color:#f57c00;">
            <span style="font-size: 32px; margin-right: 12px;">
              <svg class="warningIcon" focusable="false" height="1.3em" width="1em" viewBox="0 0 1500 1313" xmlns="http://www.w3.org/2000/svg">
                <title>Warning</title>
                <path style="fill:currentColor;" d="M.956 1196.326l668.58-1144.89C689.395 17.736 718.71 0 749.916 0c31.207 0 59.577 15.963 80.382 51.436l668.58 1144.89c7.565 12.416-23.642 116.174-77.544 116.174H85.474c-53.902 0-92.083-102.872-84.518-116.174zm643.333-684.743l32.146 257.167c4.908 39.264 34.086 74.685 69.815 91.187 36.612-16.018 64.87-50.826 69.914-91.187l32.146-257.167C855.18 456.623 815.582 411 759.7 411h-26.8c-55.908 0-95.555 45.033-88.61 100.583zm101.294 644.209c63.283 0 114.584-51.301 114.584-114.584 0-63.282-51.301-114.583-114.584-114.583-63.282 0-114.583 51.3-114.583 114.583s51.3 114.584 114.583 114.584z"></path>
              </svg>
            </span>
            Important Notice
          </h3>
          <p class="text-muted" style="font-size: 16px;">
            Avoid long date ranges like <strong>Last 30 days</strong> to avoid performance bottlenecks.
          </p>
          <p class="text-muted" style="font-size: 16px;">
            Please ensure an <strong>Index</strong> is selected before running this dashboard.
          </p>
        </div>
      </div>
    </html>

    <input type="dropdown" token="field1">
      <label>Index</label>
      <choice value="_internal">_internal</choice>
    </input>
    <input type="dropdown" token="field2">
      <label>Something else</label>
      <choice value="*">*</choice>
    </input>
  </fieldset>

  <row>
    <panel>
      <table>
        <search>
          <query>|tstats count where index=_internal by host</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

 

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...