Dashboards & Visualizations

What are the best tools to develop and deploy dashboards?

chris
Motivator

Hi everyone

I was wondering about what tools & techniques you use to develop dashboards.

We have a Unix based search head and Windows work stations at our company.

I sometimes use Eclipse with Target Management RSE (Remote System Explorer) and an integrated XML Editor to edit the xml-Files.

Sometimes I just use vim to edit the files on the server directly

Then to refresh I call:
http(s)://mysplunk:<port>/en-US/debug/refresh?entity=/admin/views

There are other URLs that will refresh dashboards or make them visible, but this one does not require the management port which is blocked by the firewall ( until we have enough reasons to request the firewall team to change this)

I tell users who do not have access to the server directly to use Chrome as a webbrowser because it allows you to resize the textbox where you edit the xml.

Any feedback is appreciated.

Chris

1 Solution

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

View solution in original post

chris
Motivator

Thanks for the feedback, I'll leave the question open for a little while and select the best answer then

0 Karma

araitz
Splunk Employee
Splunk Employee

+1 for vim. Sometimes I use Manager to edit views (gasp!).

0 Karma

ziegfried
Influencer

I usually mount the app directory on my workstation and use either TextMate, Notepad++ or IntelliJ to edit the XML files.

Every editor has its own sweet spots. TextMate allows you to define snippets, which allows you to get those views created very quickly. An equivalent for TextMate on Windows would be the E-Texteditor.

IntelliJ allows you to include the schema files and so automatically validates the views as you write them.

Notepad++ is free 😉

To refresh the view, you only have to refresh the app by eg. clicking on the App icon (on the top left). There's no need to call an endpoint.

ftk
Motivator

I second Notepad++!

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...