Dashboards & Visualizations

What are the best tools to develop and deploy dashboards?

chris
Motivator

Hi everyone

I was wondering about what tools & techniques you use to develop dashboards.

We have a Unix based search head and Windows work stations at our company.

I sometimes use Eclipse with Target Management RSE (Remote System Explorer) and an integrated XML Editor to edit the xml-Files.

Sometimes I just use vim to edit the files on the server directly

Then to refresh I call:
http(s)://mysplunk:<port>/en-US/debug/refresh?entity=/admin/views

There are other URLs that will refresh dashboards or make them visible, but this one does not require the management port which is blocked by the firewall ( until we have enough reasons to request the firewall team to change this)

I tell users who do not have access to the server directly to use Chrome as a webbrowser because it allows you to resize the textbox where you edit the xml.

Any feedback is appreciated.

Chris

1 Solution

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

View solution in original post

chris
Motivator

Thanks for the feedback, I'll leave the question open for a little while and select the best answer then

0 Karma

araitz
Splunk Employee
Splunk Employee

+1 for vim. Sometimes I use Manager to edit views (gasp!).

0 Karma

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

ftk
Motivator

I second Notepad++!

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...