Splunk IT Service Intelligence (ITSI) version 4.12.x reached its End of Life on January 22, 2024. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see Before you upgrade IT Service Intelligence.
Tutorial: Build a glass table to monitor your infrastructure
The following tutorial illustrates some of the capabilities of the glass table editor in IT Service Intelligence (ITSI). This tutorial includes default ds.test data sources that allow you to embed sample data directly in the dashboard definition. In this tutorial, you are an IT analyst at the fictitious Buttercup Games Store. Create a glass table to monitor and assess the health of your IT infrastructure, such as web response times and service requests. Follow this tutorial to configure a glass table and add visualizations.
Step 1: Create a dashboard definition
- From the glass table editor click Source.
- Remove the existing glass table source text.
- In the
Buttercup Games - Data Center Overviewsection below, click Expand and copy the source code for the dashboard definition. Paste the code using the source editor. - Click Back to return to the editing interface.
The source code includes default ds.test data sources that let you embed sample data directly in the dashboard definition to allow for easier prototyping and experimentation.
Buttercup Games - Data Center Overview
This JSON dashboard definition uses the glass table source editor to render the example glass table.
{
"title":"Data Center Overview",
"description":"Example of a single value in the absolute layout",
"defaults":{
"dataSources":{
"global":{
"options":{
"queryParameters":{
"earliest":"$global_time.earliest$",
"latest":"$global_time.latest$"
},
"refreshType":"delay",
"refresh":"$global_refresh_rate$"
}
}
}
},
"layout":{
"globalInputs":[
"input_global_trp",
"input_global_refresh_rate"
],
"type":"absolute",
"options":{
"width":1200,
"height":800,
"backgroundColor":"transparent",
"display":"auto-scale",
"showTitleAndDescription":true,
"backgroundImage":{
"sizeType":"contain",
"x":0,
"y":0,
"src":"local://783294cb-6579-4775-81a0-1442d4199452"
}
},
"structure":[
{
"item":"viz_BQQxwipa",
"type":"block",
"position":{
"x":30,
"y":200,
"w":158,
"h":230
}
},
{
"item":"viz_es48cFur",
"type":"block",
"position":{
"x":30,
"y":460,
"w":158,
"h":230
}
},
{
"item":"viz_JUNd5JdH",
"type":"block",
"position":{
"x":1000,
"y":200,
"w":158,
"h":230
}
},
{
"item":"viz_FhaFy99F",
"type":"block",
"position":{
"x":1000,
"y":460,
"w":158,
"h":230
}
},
{
"item":"viz_0z5USc8k",
"type":"block",
"position":{
"x":40,
"y":340,
"w":140,
"h":60
}
},
{
"item":"viz_gSCFjAX3",
"type":"block",
"position":{
"x":50,
"y":400,
"w":120,
"h":30
}
},
{
"item":"viz_ShQLzIgR",
"type":"block",
"position":{
"x":40,
"y":240,
"w":140,
"h":68
}
},
{
"item":"viz_bDAhNoYZ",
"type":"block",
"position":{
"x":60,
"y":310,
"w":110,
"h":30
}
},
{
"item":"viz_IP1KWswv",
"type":"block",
"position":{
"x":70,
"y":210,
"w":60,
"h":40
}
},
{
"item":"viz_l6r80wMC",
"type":"block",
"position":{
"x":137,
"y":120,
"w":180,
"h":43
}
},
{
"item":"viz_M6akZVFI",
"type":"block",
"position":{
"x":40,
"y":500,
"w":140,
"h":68
}
},
{
"item":"viz_NJeJdvcs",
"type":"block",
"position":{
"x":40,
"y":600,
"w":140,
"h":60
}
},
{
"item":"viz_voBUlZmz",
"type":"block",
"position":{
"x":1010,
"y":240,
"w":140,
"h":68
}
},
{
"item":"viz_xVioP174",
"type":"block",
"position":{
"x":1010,
"y":340,
"w":140,
"h":60
}
},
{
"item":"viz_ZtDnP0Fs",
"type":"block",
"position":{
"x":1010,
"y":500,
"w":140,
"h":68
}
},
{
"item":"viz_I1tMmHEB",
"type":"block",
"position":{
"x":1010,
"y":600,
"w":140,
"h":60
}
},
{
"item":"viz_7ECX44YZ",
"type":"block",
"position":{
"x":640,
"y":50,
"w":110,
"h":43
}
},
{
"item":"viz_cmZDGsHf",
"type":"block",
"position":{
"x":910,
"y":50,
"w":110,
"h":43
}
},
{
"item":"viz_MoQSmEFW",
"type":"block",
"position":{
"x":370,
"y":50,
"w":190,
"h":43
}
},
{
"item":"viz_NEWyzYk9",
"type":"line",
"position":{
"from":{
"x":188,
"y":316
},
"to":{
"item":"viz_3WegcVL1",
"port":"w"
}
}
},
{
"item":"viz_aI5IcN5M",
"type":"line",
"position":{
"from":{
"x":186,
"y":580
},
"to":{
"x":550,
"y":560
}
}
},
{
"item":"viz_vLShmXtz",
"type":"line",
"position":{
"from":{
"item":"viz_gv2TLU0g",
"port":"e"
},
"to":{
"item":"viz_JUNd5JdH",
"port":"w"
}
}
},
{
"item":"viz_fOG4XyMX",
"type":"line",
"position":{
"from":{
"item":"viz_aaxFnSUG",
"port":"e"
},
"to":{
"item":"viz_FhaFy99F",
"port":"w"
}
}
},
{
"item":"viz_qOQ0RiO2",
"type":"block",
"position":{
"x":330,
"y":80,
"w":230,
"h":70
}
},
{
"item":"viz_De0Q085K",
"type":"block",
"position":{
"x":600,
"y":80,
"w":230,
"h":70
}
},
{
"item":"viz_H2sZWjvL",
"type":"block",
"position":{
"x":330,
"y":40,
"w":35,
"h":35
}
},
{
"item":"viz_TexC1ecv",
"type":"block",
"position":{
"x":600,
"y":40,
"w":35,
"h":35
}
},
{
"item":"viz_pmn2ctU4",
"type":"block",
"position":{
"x":1050,
"y":210,
"w":60,
"h":40
}
},
{
"item":"viz_qvMWQl9T",
"type":"block",
"position":{
"x":60,
"y":570,
"w":110,
"h":30
}
},
{
"item":"viz_jkQBH6RD",
"type":"block",
"position":{
"x":50,
"y":660,
"w":120,
"h":30
}
},
{
"item":"viz_zl8gxMFT",
"type":"block",
"position":{
"x":50,
"y":470,
"w":110,
"h":40
}
},
{
"item":"viz_kIi1soGf",
"type":"block",
"position":{
"x":1030,
"y":310,
"w":110,
"h":30
}
},
{
"item":"viz_xKSRaS1V",
"type":"block",
"position":{
"x":1030,
"y":570,
"w":110,
"h":30
}
},
{
"item":"viz_tsOZAAQj",
"type":"block",
"position":{
"x":1030,
"y":470,
"w":110,
"h":40
}
},
{
"item":"viz_EI2wumBv",
"type":"block",
"position":{
"x":1020,
"y":400,
"w":120,
"h":30
}
},
{
"item":"viz_Qa6BCEba",
"type":"block",
"position":{
"x":1020,
"y":660,
"w":120,
"h":30
}
},
{
"item":"viz_8SAf99G1",
"type":"block",
"position":{
"x":330,
"y":40,
"w":35,
"h":35
}
},
{
"item":"viz_H3GD36aj",
"type":"block",
"position":{
"x":600,
"y":40,
"w":35,
"h":35
}
},
{
"item":"viz_3WegcVL1",
"type":"block",
"position":{
"x":360,
"y":340,
"w":40,
"h":40
}
},
{
"item":"viz_pedR5O1c",
"type":"block",
"position":{
"x":550,
"y":540,
"w":40,
"h":40
}
},
{
"item":"viz_gv2TLU0g",
"type":"block",
"position":{
"x":810,
"y":380,
"w":40,
"h":40
}
},
{
"item":"viz_aaxFnSUG",
"type":"block",
"position":{
"x":710,
"y":530,
"w":40,
"h":40
}
},
{
"item":"viz_dDbKEp9R",
"type":"block",
"position":{
"x":870,
"y":80,
"w":230,
"h":70
}
},
{
"item":"viz_fnXJAwah",
"type":"block",
"position":{
"x":870,
"y":40,
"w":35,
"h":35
}
}
]
},
"dataSources":{
"ds_search1":{
"type":"ds.test",
"options":{
"data":{
"fields":[
{
"name":"foo"
},
{
"name":"bar"
}
],
"columns":[
[
"95",
"88",
"88",
"83",
"84",
"88",
"88",
"95",
"98"
],
[
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8"
]
]
},
"meta":{
}
}
},
"ds_search2":{
"type":"ds.test",
"options":{
"data":{
"fields":[
{
"name":"foo"
},
{
"name":"bar"
}
],
"columns":[
[
"95",
"88",
"88",
"83",
"84",
"88",
"88",
"95",
"96"
],
[
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8"
]
]
},
"meta":{
}
}
}
},
"visualizations":{
"viz_BQQxwipa":{
"type":"splunk.rectangle",
"options":{
"backgroundColor":"transparent",
"fillOpacity":0.2,
"fillColor":"#ffffff",
"strokeColor":"transparent"
}
},
"viz_es48cFur":{
"type":"splunk.rectangle",
"options":{
"backgroundColor":"transparent",
"fillOpacity":0.2,
"fillColor":"#ffffff",
"strokeColor":"transparent"
}
},
"viz_JUNd5JdH":{
"type":"splunk.rectangle",
"options":{
"backgroundColor":"transparent",
"fillOpacity":0.2,
"fillColor":"#ffffff",
"strokeColor":"transparent"
}
},
"viz_FhaFy99F":{
"type":"splunk.rectangle",
"options":{
"backgroundColor":"transparent",
"fillOpacity":0.2,
"fillColor":"#ffffff",
"strokeColor":"transparent"
}
},
"viz_0z5USc8k":{
"type":"splunk.singlevalue",
"options":{
"backgroundColor":"#53a051",
"sparklineDisplay":"before",
"trendDisplay":"off",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search1"
}
},
"viz_gSCFjAX3":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"ServiceHealthScore",
"customFontSize":12,
"fontColor":"#ffffff"
}
},
"viz_ShQLzIgR":{
"type":"splunk.singlevalueradial",
"options":{
"backgroundColor":"#dc4e41",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search2"
}
},
"viz_bDAhNoYZ":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"CPU Utilization %",
"customFontSize":12,
"fontColor":"#ffffff"
}
},
"viz_IP1KWswv":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"West",
"customFontSize":22,
"fontColor":"#ffffff"
}
},
"viz_l6r80wMC":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#0877a6",
"fontSize":"custom",
"markdown":"Data Center Overview",
"customFontSize":16,
"fontColor":"#0877a6"
}
},
"viz_M6akZVFI":{
"type":"splunk.singlevalueradial",
"options":{
"backgroundColor":"#dc4e41",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search2"
}
},
"viz_NJeJdvcs":{
"type":"splunk.singlevalue",
"options":{
"backgroundColor":"#53a051",
"sparklineDisplay":"before",
"trendDisplay":"off",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search1"
}
},
"viz_voBUlZmz":{
"type":"splunk.singlevalueradial",
"options":{
"backgroundColor":"#dc4e41",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search2"
}
},
"viz_xVioP174":{
"type":"splunk.singlevalue",
"options":{
"backgroundColor":"#53a051",
"sparklineDisplay":"before",
"trendDisplay":"off",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search1"
}
},
"viz_ZtDnP0Fs":{
"type":"splunk.singlevalueradial",
"options":{
"backgroundColor":"#dc4e41",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search2"
}
},
"viz_I1tMmHEB":{
"type":"splunk.singlevalue",
"options":{
"backgroundColor":"#53a051",
"sparklineDisplay":"before",
"trendDisplay":"off",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search1"
}
},
"viz_7ECX44YZ":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"Requests",
"customFontSize":18,
"fontColor":"#ffffff"
}
},
"viz_cmZDGsHf":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"Errors",
"customFontSize":18,
"fontColor":"#ffffff"
}
},
"viz_MoQSmEFW":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"Web Response Time",
"customFontSize":18,
"fontColor":"#ffffff"
}
},
"viz_NEWyzYk9":{
"type":"abslayout.line",
"options":{
"toArrow":false,
"fromArrow":false,
"strokeColor":"#ffffff",
"strokeDasharray":4,
"strokeWidth":1
}
},
"viz_aI5IcN5M":{
"type":"abslayout.line",
"options":{
"fromArrow":false,
"toArrow":false,
"strokeWidth":1,
"strokeDasharray":4,
"strokeColor":"#ffffff"
}
},
"viz_vLShmXtz":{
"type":"abslayout.line",
"options":{
"fromArrow":false,
"toArrow":false,
"strokeWidth":1,
"strokeDasharray":4,
"strokeColor":"#ffffff"
}
},
"viz_fOG4XyMX":{
"type":"abslayout.line",
"options":{
"toArrow":false,
"fromArrow":false,
"strokeColor":"#ffffff",
"strokeWidth":1,
"strokeDasharray":4
}
},
"viz_qOQ0RiO2":{
"type":"splunk.singlevalue",
"options":{
"backgroundColor":"#f1813f",
"sparklineDisplay":"before",
"trendDisplay":"off",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search2"
}
},
"viz_De0Q085K":{
"type":"splunk.singlevalue",
"options":{
"backgroundColor":"#53a051",
"rangeValues":[
0,
25,
50,
75,
100
],
"rangeColors":[
"#c3cbd4",
"#dc4e41",
"#f8be34",
"#53a051",
"#c3cbd4"
],
"sparklineDisplay":"before",
"trendDisplay":"off",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search2"
},
"eventHandlers":[
{
"type":"drilldown.customUrl",
"options":{
"url":"https://docs.splunk.com/Documentation/ITSI/4.2.0/User/Sourceediting"
}
}
]
},
"viz_H2sZWjvL":{
"type":"splunk.singlevalueicon",
"options":{
"showValue":false,
"icon":"local://e0d86062-d930-4425-b100-13089d4caa6b",
"backgroundColor":"transparent"
}
},
"viz_TexC1ecv":{
"type":"splunk.singlevalueicon",
"options":{
"showValue":false,
"icon":"local://95040bb0-36fd-411b-aa6c-ecb3d542557c",
"backgroundColor":"transparent"
}
},
"viz_pmn2ctU4":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"East",
"customFontSize":22,
"fontColor":"#ffffff"
}
},
"viz_qvMWQl9T":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"CPU Utilization %",
"customFontSize":12,
"fontColor":"#ffffff"
}
},
"viz_jkQBH6RD":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"ServiceHealthScore",
"customFontSize":12,
"fontColor":"#ffffff"
}
},
"viz_zl8gxMFT":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"Southwest",
"customFontSize":22,
"fontColor":"#ffffff"
}
},
"viz_kIi1soGf":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"CPU Utilization %",
"customFontSize":12,
"fontColor":"#ffffff"
}
},
"viz_xKSRaS1V":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"CPU Utilization %",
"customFontSize":12,
"fontColor":"#ffffff"
}
},
"viz_tsOZAAQj":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"Southeast",
"customFontSize":22,
"fontColor":"#ffffff"
}
},
"viz_EI2wumBv":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"ServiceHealthScore",
"customFontSize":12,
"fontColor":"#ffffff"
}
},
"viz_Qa6BCEba":{
"type":"splunk.markdown",
"options":{
"backgroundColor":"transparent",
"color":"#ffffff",
"fontSize":"custom",
"markdown":"ServiceHealthScore",
"customFontSize":12,
"fontColor":"#ffffff"
}
},
"viz_8SAf99G1":{
"type":"splunk.singlevalueicon",
"options":{
"showValue":false,
"icon":"local://f36dac7e-fcca-49db-ac2e-a632ed583e52",
"backgroundColor":"transparent"
}
},
"viz_H3GD36aj":{
"type":"splunk.singlevalueicon",
"options":{
"showValue":false,
"icon":"local://95cf36c3-87d4-40cf-85eb-569b06ccfd5b",
"backgroundColor":"transparent"
}
},
"viz_3WegcVL1":{
"type":"splunk.singlevalueicon",
"options":{
"showValue":false,
"icon":"local://a070397a-bf9c-4e23-9ccd-961c865ea648",
"backgroundColor":"transparent"
}
},
"viz_pedR5O1c":{
"type":"splunk.singlevalueicon",
"options":{
"showValue":false,
"icon":"local://a070397a-bf9c-4e23-9ccd-961c865ea648",
"backgroundColor":"transparent"
}
},
"viz_gv2TLU0g":{
"type":"splunk.singlevalueicon",
"options":{
"showValue":false,
"icon":"local://a070397a-bf9c-4e23-9ccd-961c865ea648",
"backgroundColor":"transparent"
}
},
"viz_aaxFnSUG":{
"type":"splunk.singlevalueicon",
"options":{
"showValue":false,
"icon":"local://a070397a-bf9c-4e23-9ccd-961c865ea648",
"backgroundColor":"transparent"
}
},
"viz_dDbKEp9R":{
"type":"splunk.singlevalue",
"options":{
"backgroundColor":"#dc4e41",
"rangeValues":[
0,
25,
50,
75,
100
],
"rangeColors":[
"#c3cbd4",
"#dc4e41",
"#f8be34",
"#53a051",
"#c3cbd4"
],
"sparklineDisplay":"before",
"trendDisplay":"off",
"majorColor":"#ffffff"
},
"dataSources":{
"primary":"ds_search2"
},
"eventHandlers":[
{
"type":"drilldown.customUrl",
"options":{
"url":"https://splunk.com"
}
}
]
},
"viz_fnXJAwah":{
"type":"splunk.singlevalueicon",
"options":{
"showValue":false,
"icon":"local://33b4bb39-bc34-47f4-a807-1ac4301b7633",
"backgroundColor":"transparent"
}
}
},
"inputs":{
"input_global_trp":{
"options":{
"defaultValue":"-60m@m, now",
"token":"global_time"
},
"type":"input.timerange",
"title":"Global Time Range"
},
"input_global_refresh_rate":{
"options":{
"items":[
{
"value":"60s",
"label":"1 Minute"
},
{
"value":"300s",
"label":"5 Minutes"
},
{
"value":"1800s",
"label":"30 Minutes"
},
{
"value":"3600s",
"label":"1 Hour"
},
{
"value":"86400s",
"label":"24 Hours"
}
],
"defaultValue":"60s",
"token":"global_refresh_rate"
},
"type":"input.dropdown",
"title":"Global Refresh Rate"
}
}
}
Step 2: Add images
- Download and unzip the following image files to a convenient location on your computer.
- In the Background Image section of the Configuration panel, add the
BCGBackground.jpgimage. - In the editing toolbar, click the icon button
- Click browse... and add the following icons that you downloaded:
-
Error-Icon.svg -
Location-Icon.svg -
Request-Icon.svg -
Web-Icon.svg
-
- Select an icon to add it to your dashboard. Resize and position the icons to match the image at the beginning of this exercise. The uploaded icons are white, so you must either find them by name or hover over them to see the images.
- Click save
when you're finished.
Additional resources
You can also install the Content Pack for Example Glass Tables to get preconfigured glass tables directly into your ITSI environment. For more information, see About the Content Pack for Example Glass Tables.
Last modified on 28 April, 2023
| Tutorial: Build a glass table to monitor request and volume flow |
This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.5, 4.11.6, 4.12.0 Cloud only, 4.12.1 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3, 4.16.0 Cloud only, 4.17.0, 4.17.1, 4.18.0, 4.18.1, 4.19.0, 4.19.1
Download manual
Feedback submitted, thanks!