Where to start on how to build a query and dashboard?

[Gordon1]

Hallo everyone!

I started to work with Splunk 2 mounths ago. I don't know where I can start to look for information, how to build a query and dashboard (flow map). Do you have any ideia?

Greetings

[bowesmana · Accepted solution]

Have you seen the Flow Map vis app?

https://splunkbase.splunk.com/app/4657

The Spliunk dashboard exampls is a good starting point to learn about dashboards

https://splunkbase.splunk.com/app/1603

It has lots of examples - they will not use the Flow Map viz, but will show you the basics of creating (XML based) dashboards.

[Gordon1]

Thank you very much!