Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Splunk 6 Advanced XML
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I've read in a couple of posts that Advanced XML is discouraged in Splunk 6. Is this true in all cases? If so, is the feature only in there for legacy purposes? Is there any specific use cases where it is preferred?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Advanced XML is still part of the product, and is not listed as a deprecated feature. Splunk is continuing to develop the features and capabilities of simple XML to address more of the common use cases that formerly required advanced XML. If the current features of simple XML don't meet your needs, you can still use advanced XML. The Web Framework gives you the ability to convert your dashboards to HTML and JavaScript to add custom interactivity, if you prefer to develop that way.
Advanced XML is a legacy technology, it is true. The focus now is on simple XML and the Web Framework. But it is not a deprecated feature at this point.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Advanced XML is still part of the product, and is not listed as a deprecated feature. Splunk is continuing to develop the features and capabilities of simple XML to address more of the common use cases that formerly required advanced XML. If the current features of simple XML don't meet your needs, you can still use advanced XML. The Web Framework gives you the ability to convert your dashboards to HTML and JavaScript to add custom interactivity, if you prefer to develop that way.
Advanced XML is a legacy technology, it is true. The focus now is on simple XML and the Web Framework. But it is not a deprecated feature at this point.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is no longer true with the release of 6.3 as Advanced XML is deprecated from then onward:
http://docs.splunk.com/Documentation/Splunk/6.3.3/ReleaseNotes/Deprecatedfeatures
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The impression I've gotten is that Advanced XML and the Modules API it uses is being replaced by the Web Framework, but the docs don't really reflect that. It's confusing to have 3 different languages for dashboards, though.
I agree a response from Splunk would be good!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It would be really nice if someone from Splunk answered this question. The documentation for Splunk 6 includes an entire manual on advanced xml yet I see this question/answer which has my head scratching whether to continue to use advanced XML: http://answers.splunk.com/answers/109408/splunk-6-converting-simple-xml-to-advanced-xml-with-saved-s...
"The use of Advanced XML to customize is no longer encouraged."
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas
What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)
Automating Threat Operations and Threat Hunting with Recorded Future
