Monitoring Splunk

dashboard templates

Karis_wen
New Member

Hello!

I've created a Dashboard with some panels. Now I need to import new data and create a new index, but the data format are the same as before so I want to use the same dashboard and panels to display the same visualization.

Is there any ways for me to do so without writing each query again and then save to dashboard?

Thanks a lot!

Labels (1)
Tags (1)
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Karis_wen 

You can clone the dashboard and change the index name. 

https://docs.splunk.com/Documentation/Splunk/8.2.0/Viz/DashboardCloneHome


In case of JS or CSS, if the logics are same then old JS & CSS will work.

 

KV

 

0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @Karis_wen 

If it is a simple xml dashboard open old dashboard, click Edit -> switch to Source and copy the xml to your text editor replace index/source/sourcetypes that you wish and replace the same with content in Source tab. Click save.

Same you can do it from backend however you need access to Splunk host and restart might be required.

---

An upvote would be appreciated and Accept solution if it helps!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

AI is one of the biggest topics in the market today, and for security teams, its value goes far beyond the ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

[REGISTER HERE] This thread is for the Community Office Hours session on Detection Engineering Office Hours: ...