Splunk® Enterprise

Dashboards and Visualizations

Download manual as PDF

Download topic as PDF

Dashboard overview

Create new dashboards or edit existing ones.

The dashboard and form workflow

Working with dashboards includes one or more of the following tasks.

Build dashboards

  • Create a new dashboard
  • Add new visualizations to a dashboard

Edit dashboards

  • Add a panel to a dashboard
  • Edit dashboard panels and panel visualizations
  • Manage dashboard searches

Convert a dashboard to a form

  • Add user inputs to a dashboard to convert it to a form
  • Edit forms
  • Work with user input settings

Customize Simple XML

  • Edit Simple XML source code to customize a dashboard or form.

Add interactive and dynamic behavior

  • Use tokens to capture and transfer data.
  • Add event handlers to implement dynamic behavior.

Tools and frameworks

To build and edit dashboards, use one or more of the following tools and frameworks.

Dashboard editor user interface

Build and edit dashboards using the Splunk Web user interface.

Simple XML

Dashboards use Simple XML source code to define their content and behavior. You can use the dashboard editor in Splunk Web to edit this source code.

To learn more, see Editing Simple XML.

Developer options

Splunk Enterprise users can implement additional dashboard customizations.

  • Extend Simple XML using CSS and JavaScript.
  • Convert a Simple XML dashboard to HTML and use JavaScript to implement customizations including inputs and REST API access.

For more information, see the following Splunk developer portal resources.


Note: Dashboards converted to HTML have some editing limitations in Splunk Web. They also cannot be exported to PDF.

Use case scenario

You can follow the Create a failed login dashboard scenario to learn about implementing an interactive dashboard.


Examples

The Dashboard Examples app on Splunkbase provides many dashboard implementation examples, including source code. Install the app to view and interact with the example dashboards.


Deprecated options

The following dashboard framework options are deprecated as of version 6.3.0.

Option For more information see
Advanced XML Advanced XML deprecation
Module System (Deprecated as part of Advanced XML). Advanced XML deprecation
Django Bindings Django Bindings Deprecation Notice
PREVIOUS
Use trellis layout to split visualizations
  NEXT
About the dashboard editor

This documentation applies to the following versions of Splunk® Enterprise: 6.5.0, 6.5.1, 6.5.1612 (Splunk Cloud only), 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.6.0, 6.6.1, 6.6.2, 6.6.3


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters