Dashboards & Visualizations

Why is health dashboard help showing if an even was received in the last x minutes?

Keo
Loves-to-Learn

Hi all.  I am very new to splunk so please be gentle here. 🙂

I have the following json payload being updated in our splunk index.

 

 

{
  "status": "open",
  "description": "some information here"
  "severity": "unknown",
  "ingestion_source": "source type here"
}

 

 

 

What I want to do is have a tile that is per ingestion_source that turns red if a new payload hasn't been received in the last 5 minutes.

I know how to make the query, I am just struggling with how to make the dashboard do what I explained.

Any help is much appreciated.

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...