Dashboards & Visualizations

Windows infrastructure dash board cloning does not save all edited entries

BillBaker
Explorer

I am not sure what one gains from editing cloned windows infrastructure dashboards (ex. Event Monitoring) short of gaining a new title and re-arranging palette windows. If an attempt to made to save the entries specific information (eg. Event host, log name, etc) to the clone, in order to save from having to enter these specific drop downs each time the dashboard is selected, nothing is saved but the clone, title and ownership. One still has to click the drop downs to enter the specifics - one might as well use the base each time.

So, is there a way to store the specific answers to the drop downs to a give clone?

0 Karma

BillBaker
Explorer

Thank you for your answer - in general, I would agree with you, but with the Windows infrastructure app, one does not have access to the search strings from the Dashboard editing. You can add or subtract panels, change ownership, and change the description of said clone dashboard, but one can not set/save or access any of the search strings. Looking at the xml for the optional panels, I can not add one that the app picks up, so again editing is restricted.

My question on this is over the restrictiveness of this app in view of others that allows the ability to make such changes that you mentioned. Splunk is the owner of this app, so I questioned their current logic in this apps Dashboard editing restrictions.

So, your answer, though true in most instances, does not seem to apply in this one.

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi BillBaker, I think you'll want to investigate what type of elements are being used to populate those drop downs. That can be determined by viewing the source of the dashboard.

If the dropdown is populated by a static list, you'll be able to edit those options. It could also be populated by a search, and so in that way you could edit the search to include/exclude certain options. Check out this for more info : http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML

Please let me know how if this helps 😄

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...