Dashboards & Visualizations

What are the best tools to develop and deploy dashboards?

chris
Motivator

Hi everyone

I was wondering about what tools & techniques you use to develop dashboards.

We have a Unix based search head and Windows work stations at our company.

I sometimes use Eclipse with Target Management RSE (Remote System Explorer) and an integrated XML Editor to edit the xml-Files.

Sometimes I just use vim to edit the files on the server directly

Then to refresh I call:
http(s)://mysplunk:<port>/en-US/debug/refresh?entity=/admin/views

There are other URLs that will refresh dashboards or make them visible, but this one does not require the management port which is blocked by the firewall ( until we have enough reasons to request the firewall team to change this)

I tell users who do not have access to the server directly to use Chrome as a webbrowser because it allows you to resize the textbox where you edit the xml.

Any feedback is appreciated.

Chris

1 Solution

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

View solution in original post

chris
Motivator

Thanks for the feedback, I'll leave the question open for a little while and select the best answer then

0 Karma

araitz
Splunk Employee
Splunk Employee

+1 for vim. Sometimes I use Manager to edit views (gasp!).

0 Karma

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

ftk
Motivator

I second Notepad++!

0 Karma
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...

Federated Search for Amazon S3 | Key Use Cases to Streamline Compliance Workflows

Modern business operations are supported by data compliance. As regulations evolve, organizations must ...