Since Upgrading to Splunk 6.6.0 we cannot access Dashboard, Indexes ... (seems any submenu) when using Internet Explorer 11 and the DNS name of the Server. Strange thing is, it is working when using the IP address in the URL instead of the DNS name or it is working when using Firefox or Chrome browser with DNS name or IP. Any ideas on that? ... View more

I want to refresh a dashboard with multiple single values (about 15) every minute. The dashboard will be displayed on a screen for an IT Department to watch. Possible solutions I found so far: 1) Refresh complete dashboard with <dashboard refresh = "60"> Problem: The screen is jumping and as long as the dashboards are loading there are no values shown. 2) Refresh individual single values with <option name="refresh.auto.interval">60</option> Problem: Works better than 1) but still the it shows "waiting for data" a lot of the time before showing the actual value 3) Use real time search Problem: This actually works, but I will have to keep running 15 real time searches for a simple dashboard where the value only changes every 1 minute. Is there a better way to do this? It would be perfect if the Single Value would keep its value until the refresh is done and then show the new value. This questions has been asked multiple times without a real answer, so it seems I am not the only one searching for a solution to this: https://answers.splunk.com/answers/363906/how-can-i-stop-screen-jump-on-auto-refresh-of-a-da.html https://answers.splunk.com/answers/320184/refreshing-a-dashboard-wo-grey-waiting-for-data.html https://answers.splunk.com/answers/243621/is-there-a-way-to-refresh-just-the-tick-on-a-radia.html ... View more

I would like to create something that is shown in the Operational Intelligence Demo of Splunk (see screenshot below). In this Dashboard there are several icons changing color depending on the status of an IT area like operations or security. The status icons are linked to a dashboard that shows more details about this area. From what I can tell so far: - the custom icons with changing colors can be created using custom CSS and rangemap - Linking to another dashboard should not be a problem as well But every status icon should change depending on the results of like 5-10 searches, for which I have already created a dashboard that is showing the individual results. Is there a more intelligent way to get the status other than doing a complex rangemap query that does all of the searches in one query and somehow change status depending on different thresholds for each subsearch? Can this be done with Splunk native or is extending splunk involved? Is there any example in an App how to do something like this (free or not)? ... View more