I've read in a couple of posts that Advanced XML is discouraged in Splunk 6. Is this true in all cases? If so, is the feature only in there for legacy purposes? Is there any specific use cases where it is preferred?
Advanced XML is still part of the product, and is not listed as a deprecated feature. Splunk is continuing to develop the features and capabilities of simple XML to address more of the common use cases that formerly required advanced XML. If the current features of simple XML don't meet your needs, you can still use advanced XML. The Web Framework gives you the ability to convert your dashboards to HTML and JavaScript to add custom interactivity, if you prefer to develop that way.
Advanced XML is a legacy technology, it is true. The focus now is on simple XML and the Web Framework. But it is not a deprecated feature at this point.
Advanced XML is still part of the product, and is not listed as a deprecated feature. Splunk is continuing to develop the features and capabilities of simple XML to address more of the common use cases that formerly required advanced XML. If the current features of simple XML don't meet your needs, you can still use advanced XML. The Web Framework gives you the ability to convert your dashboards to HTML and JavaScript to add custom interactivity, if you prefer to develop that way.
Advanced XML is a legacy technology, it is true. The focus now is on simple XML and the Web Framework. But it is not a deprecated feature at this point.
This is no longer true with the release of 6.3 as Advanced XML is deprecated from then onward:
http://docs.splunk.com/Documentation/Splunk/6.3.3/ReleaseNotes/Deprecatedfeatures
The impression I've gotten is that Advanced XML and the Modules API it uses is being replaced by the Web Framework, but the docs don't really reflect that. It's confusing to have 3 different languages for dashboards, though.
I agree a response from Splunk would be good!
It would be really nice if someone from Splunk answered this question. The documentation for Splunk 6 includes an entire manual on advanced xml yet I see this question/answer which has my head scratching whether to continue to use advanced XML: http://answers.splunk.com/answers/109408/splunk-6-converting-simple-xml-to-advanced-xml-with-saved-s...
"The use of Advanced XML to customize is no longer encouraged."