Dashboards & Visualizations

What are the best tools to develop and deploy dashboards?

chris
Motivator

Hi everyone

I was wondering about what tools & techniques you use to develop dashboards.

We have a Unix based search head and Windows work stations at our company.

I sometimes use Eclipse with Target Management RSE (Remote System Explorer) and an integrated XML Editor to edit the xml-Files.

Sometimes I just use vim to edit the files on the server directly

Then to refresh I call:
http(s)://mysplunk:<port>/en-US/debug/refresh?entity=/admin/views

There are other URLs that will refresh dashboards or make them visible, but this one does not require the management port which is blocked by the firewall ( until we have enough reasons to request the firewall team to change this)

I tell users who do not have access to the server directly to use Chrome as a webbrowser because it allows you to resize the textbox where you edit the xml.

Any feedback is appreciated.

Chris

1 Solution

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

View solution in original post

chris
Motivator

Thanks for the feedback, I'll leave the question open for a little while and select the best answer then

0 Karma

araitz
Splunk Employee
Splunk Employee

+1 for vim. Sometimes I use Manager to edit views (gasp!).

0 Karma

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

ftk
Motivator

I second Notepad++!

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

 Are you ready to revolutionize your IT operations? As digital transformation accelerates, the demand for ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...