Splunk Dashboard Studio - add new types of data sources?

[dmoberg]

In Dashboard Studio for ITSI, we have enabled the Infrastructure AddOn and the ServiceMap, but I am wondering what other types of data sources that can be added?

For example, I would like to be able to connect to the Kubernetes API to run kubectl commands, etc. This way we would be able to display the current settings for Kubernetes deploys such as Auto Scaling config, etc.

This is how the data sources currently is configured. In this list we would like to be able to add more types of data sources.

Any ideas on this?

[livehybrid · Accepted solution]

Hi @dmoberg 

The only 2 main data sources available as of Splunk 10.0 are Standard SPL Searches (either via Base/Chained or saved search) and Splunk Observability. 

If you're wanting to query K8s directly from your dashboard then you will need a custom command which can be run via a standard Splunk SPL search, Im not aware of an existing app which provides this functionality and couldnt find one on Splunkbase either - therefore you would need to create a custom app with a custom command that interacts with your K8s cluster. Once you have this you can include it in your dashboard using standard SPL.

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[dmoberg]

Thanks! Ok then I know. Do you happen to know where I could find a simple example of a custom app?