Splunk Search

Search results, dashboards and search bar on same dashboard page

splunker30039
Path Finder

I would like to create a dashboard that consists of 2 main parts:

1 - open search bar allowing any search 2 - results of searches that ran when dashboard was loaded, unrelated to 1).

I figure this is done with advanced views (what is the difference between a view and a dashboard?), but I could need some more pointers - e.g. basic structure/layout etc. to get started.

Thanks!!

Tags (2)

StefanB
Explorer

I am also struggeling with the difference of "view" and "dashboard".

For now on I can say when I have a "dashboard.xml" like this:

<view template="dashboard.html">
<module name="AccountBar" layoutPanel="appHeader"/>
<module name="AppBar" layoutPanel="navigationHeader"/>
<module name="SearchBar" layoutPanel="mainSearchControls">
    <module name="Paginator">
        <param name="entityName">events</param>
        <param name="count">10</param>
            <module name="EventsViewer">
        </module>
    </module>
</module>


<dashboard>
<label>Dashboard</label>

(here it does not display my row and html tags)

I found out that I have my searchpanel and paginator, but cannot use dashboard in advanced?

Please can anyone tell the real differences between view, dashboard, advanced view?

0 Karma

splunker30039
Path Finder

I did, went through the example UI stuff, but couldn't find anything that resolved my issue.

0 Karma

jrodman
Splunk Employee
Splunk Employee
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...