How to create heatmap visualization in dashboard studio?

[Hemnaath]

Hi Team,

I have requirement from a user who had created a Classic XML dashboard using the heatmap visualization app and he wanted the convert the dashboard-to-dashboard studio when he is trying to do so it's throwing an error.

Splunk Enterprise Version: 9.4.6  

Example SPL Query:

index=_internal | timechart span=10m count by component

XML Source code details

<dashboard version="1.1" theme="light">
<label>Test_XML_dashboard</label>
<row>
<panel>
<viz type="heat-map-viz.heat-map-viz">
<search>
<query>index=_internal | timechart span=10m count by component</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="drilldown">none</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
</viz>
</panel>
</row>
</dashboard>

Using the XML to Json converter created the below Json query but it was throwing an error when copy/pasting the below Json code in the source code.

{

"dashboard": {

"label": "Test_XML_dashboard",

"row": {

"panel": {

"viz": {

"search": {

"query": "index=_internal | timechart span=10m count by component",

"earliest": "-24h@h",

"latest": "now",

"sampleRatio": "1"

},

"option": [

{

"_name": "drilldown",

"__text": "none"

},

{

"_name": "trellis.enabled",

"__text": "0"

},

{

"_name": "trellis.scales.shared",

"__text": "1"

},

{

"_name": "trellis.size",

"__text": "medium"

}

],

"_type": "heat-map-viz.heat-map-viz"

}

}

},

"_version": "1.1",

"_theme": "light"

}

}

Error detail:  Layout undefined is not defined

Question: Is there a way we can convert the existing xml dashboard with heatmap visualization in Splunk dashboard studio. 

[livehybrid]

Hi @Hemnaath 

What version of Splunk are you running? Custom viz in dashboard studio is currently only available in > 10.1.0 which is currently Splunk Cloud only, we should hopefully see 10.2 in the new year which should have this capability for on-premise users.

Also, its not possible to simply convert the XML to JSON, the syntax of dashboard studio dashboards is significantly different. Splunk has an inbuilt conversion tool, click the ... at the top right of your classic dashboard and click 'Clone in Dashboard Studio' - this will convert (as good as it can!)

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing