Splunk Search

How do I make a list of Dashboards that are not working & who created them? in Splunk Ent. or ES?

SamHTexas
Builder

How do I search (any SPLs) for Dashboards that are not working (either built-in or created by users) or having errors while running in Splunk Core or ES? Thank u very much for any help.

Labels (1)
Tags (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

How do you decide what constitutes a non-working dashboard? One thing is that a query populating widgets might be syntacticaly wrong or might be referencing a non-existing object. Maybe with some deal of painful work you could (semi)automaticaly detect such ones. But what about the ones that simply return wrong values? How would you be able to decide which values make sense and which don't without understanding what they represent?

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...