Dashboards & Visualizations

What are the best tools to develop and deploy dashboards?

chris
Motivator

Hi everyone

I was wondering about what tools & techniques you use to develop dashboards.

We have a Unix based search head and Windows work stations at our company.

I sometimes use Eclipse with Target Management RSE (Remote System Explorer) and an integrated XML Editor to edit the xml-Files.

Sometimes I just use vim to edit the files on the server directly

Then to refresh I call:
http(s)://mysplunk:<port>/en-US/debug/refresh?entity=/admin/views

There are other URLs that will refresh dashboards or make them visible, but this one does not require the management port which is blocked by the firewall ( until we have enough reasons to request the firewall team to change this)

I tell users who do not have access to the server directly to use Chrome as a webbrowser because it allows you to resize the textbox where you edit the xml.

Any feedback is appreciated.

Chris

1 Solution

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

View solution in original post

chris
Motivator

Thanks for the feedback, I'll leave the question open for a little while and select the best answer then

0 Karma

araitz
Splunk Employee
Splunk Employee

+1 for vim. Sometimes I use Manager to edit views (gasp!).

0 Karma

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

ftk
Motivator

I second Notepad++!

0 Karma
Get Updates on the Splunk Community!

Security Highlights: September 2022 Newsletter

 September 2022 The Splunk App for Fraud Analytics (SFA) is now Splunk SupportedUse your existing Splunk ...

Platform Highlights | September 2022 Newsletter

 September 2022 What’s New in 9.0 and How to UpgradeGet a walk through of what is new Splunk Enterprise 9.0 ...

Observability Highlights | September 2022 Newsletter

 September 2022 Splunk Observability SuiteAccess to "Classic" SignalFx Interface Will be Removed on Sept 30, ...