Splunk Search

Change search app visualization library

user456
Engager

Due to some limitations in regards to the number of printable events in the built-in charts I want to use D3 or maybe Rickshaw or Google Charts for visualizations. I've already managed this in an app by following the Music dashboard example.

What I like to know now is if it is possible to change Splunk's default search app to use D3 completely so that all visualizations are done by this library.

There are further demos by Splunk about how to use Rikshaw and Google Charts (they are currently offline somehow).

Just for reference the limitations which I've mentioned:

0 Karma

ShaneNewman
Motivator

You will need to go into the XML file for the search app, I believe the main search you go to is dashboard_live and make your changes there.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...