Splunk Customized dashboard creation

[sankardevarajan]

Need a report based on previous day 
I have source ip segment xx.xx.xx.xx/28, & destination ip segment xx.xx.xx/24 

outcome of query should provide below

• Date and start + end time of the connection
• USERNAME
• APPLICATION:PORT & PROTOCOL
• APPLICATION SEGMENTS
• ACCESS POLICY NAME
• ACTION
  how can i create customized dashboard, please suggest.

[ITWhisperer]

Start with a search that returns the data you are interested in visualising. Do you have this already?

[sankardevarajan]

No. i dont have customized dasboard, can you please share some reference query?

[ITWhisperer]

You don't need a dashboard to create a search - just use the search and reporting interface to find the events you are interested in. Do you know what these events are?