Dashboards & Visualizations

dynamic panel creation

VI371887
Path Finder

Hi all need some help with dashboards..
does splunk supports creation of dashboard panels dynamically.

let's say you have 3 Virtual machines, each with one panel showing cpu, memory, now if a new machine is introduced the splunk should automatically create a similar panel for newly introduced virtual machine or jvm.

Tags (1)
0 Karma
1 Solution

tiagofbmm
Influencer

Yes you can do that using the trellis:

In the following example you will get one panel per each of the sourcetype values existent in the search. So if a new one appears, then you'll get one more panel.

Copy the example and test it yourself. Let me know if it is what you are looking for

<dashboard>
  <label>Trellis</label>
  <row>
    <panel>
      <single>
        <search>
          <query>index=_internal | stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="refresh.display">progressbar</option>
        <option name="trellis.enabled">1</option>
        <option name="trellis.size">small</option>
        <option name="trellis.splitBy">sourcetype</option>
      </single>
    </panel>
  </row>
</dashboard>

View solution in original post

0 Karma

tiagofbmm
Influencer

Yes you can do that using the trellis:

In the following example you will get one panel per each of the sourcetype values existent in the search. So if a new one appears, then you'll get one more panel.

Copy the example and test it yourself. Let me know if it is what you are looking for

<dashboard>
  <label>Trellis</label>
  <row>
    <panel>
      <single>
        <search>
          <query>index=_internal | stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="refresh.display">progressbar</option>
        <option name="trellis.enabled">1</option>
        <option name="trellis.size">small</option>
        <option name="trellis.splitBy">sourcetype</option>
      </single>
    </panel>
  </row>
</dashboard>
0 Karma

VI371887
Path Finder

My organization has Splunk 6.5.2 and as per trellis about series, it was debuted 6.6 version.
hence I am unable to test this out.

Thanks for the quick response.

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...