Splunk® Enterprise

Data Model and Pivot Tutorial

Download manual as PDF

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Download topic as PDF

Add pivots to dashboard

This topic continues where you left off in Part 3: Designing a Pivot Report. The last pivot you created was a pie chart. If you haven't created that chart, you can return to the previous topic and do so. Now, you will save that visualization to a new dashboard panel and then add all previous pivot reports to the same dashboard.

Save a Pivot as a dashboard panel

You just created a pie chart, now let's save it to a dashboard panel.

1. Click Save as and select Dashboard panel.

6.2tutorial pivot savetodashboard.png

This opens the Save as Dashboard Panel dialogue.

6.3 Tutorial pivot savetodashboard2.png

2. Define a new dashboard to save the panel to:

  • For Dashboard, click New.
  • Enter the Dashboard Title: Buttercup Games. The Dashboard ID will update with Buttercup_games.
  • (Optional) Add a Dashboard Description: Reports on Buttercup Games online shop data.

3. Define the dashboard panel:

  • Enter the Panel Title: Successful Purchases by Category
  • Leave the Panel Powered BY as Inline search.
  • For Panel Content, click Pie.

4. Click Save.

The dashboard was successfully created.

5. To continue, click View Dashboard.

6.2tutorial pivot dashboard.png

View and edit dashboard panels

After you save a dashboard, you can access it by clicking Dashboards in the app navigation bar.

1. Click Dashboards in the app navigation bar.

This takes you to the Dashboards listing page.

6.2tutorial pivot dashboardslist.png

You can Create a new dashboard and edit existing dashboards. You see the Buttercup Games dashboard you just created.

2. Under the i column, click the arrow next to Buttercup Games to see more information about the dashboard: What app context it is in, whether or not it is scheduled, and its permissions.

6.2tutorial pivot dashboardslistinfo.png

There are also quick links to edit the dashboard's Schedule and Permissions inline with the information.

To view the dashboard, click the dashboard's Title or select the Edit option under Actions.

Note: If you click to view a dashboard and you cannot view it (or it displays blank), check that you have read access to the data model. To do this, go to the Manage Data Models view and edit the Permissions for the Buttercup Games data model to share in the App.

Add an input to the dashboard

1. In the Dashboards list, click Buttercup Games to return to that dashboard.

2. Click Edit and select Edit Panels.

The Edit: Buttercup Games view opens.

6.3 Tutorial pivot addinput.png

In this view, you have edit buttons: Add Input, Add Panel, and Edit Source.

3. Click Add Input and select Time.

6.3 Tutorial pivot addinput2.png

This adds a shared time range picker input to the dashboard editor.

Dashboard panel edit shared time range picker.png

4. Click the Edit Input icon for the time range picker. It looks like a pencil.

This opens a set of input controls. The Time input type should be preselected.

6.3 Tutorial pivot edit time input token.png

5. Change the Token value to Buttercup_Games_Time_Range and click Apply.

This optional step redefines the name of the input token for the time range picker. Because the default names of input tokens are not very descriptive (field1, field2, field3, and so on), you may want to do this when you give your dashboard multiple inputs. It makes it easier to understand which input you are working with.

You can also optionally change the default time range for the picker by changing the value of Default. Right now it defaults to All time.

In the next two steps you connect your dashboard panel to this time range picker.

6. In the new dashboard panel, click the Inline Pivot icon and select Edit Search String.

The Edit Search dialog opens.

6.3 Tutorial pivot panel edit search timerange.png

7. Click Time Range Scope and select Shared Time Picker (Buttercup_Games_Time_Range).

8. Click Save.

The panel is now hooked up to the shared time range picker input. The inline search that powers the panel now uses the time range selected for the shared time range picker.

As you add panels to this dashboard, repeat steps 6 through 8 to hook the new panels up to the shared time range picker input.

You can have dashboards that offer a mix of panels that work with the shared time range picker and panels that show data for fixed time ranges.

9. Click Done to save your changes to the dashboard.

6.2tutorial pivot addinput3.png

Add saved reports to the dashboard

Add another panel using one of the saved reports you created earlier.

1. In the Buttercup Games dashboard, click Edit and select Edit Panels.

2. In the Edit: Buttercup Games view, click Add Panel.

6.2tutorial pivot editpanels.png

The Add Panel sidebar menu slides open.

3. To add a new panel from a report, click New from Report.

6.2tutorial pivot newfromreport.png

4. Click Total Purchase Requests.

This slides open a preview panel with information about the saved report.

6.2tutorial pivot newfromreport2.png

4.a Click Add to Dashboard.

The new panel is placed in the dashboard editor. You can click anywhere to close the Add Panel sidebar menu or choose another report to add to the dashboard.

Before you close the Add Panel sidebar menu, add a second report.

5. Click Purchases by Product.

6.2tutorial pivot newfromreport3.png

5.a Click Add to Dashboard.

6. Close the sidebar menu.

While in the dashboard editor view, drag and drop the panels to rearrange them on the dashboard.

Note: If you want the new panels to work with the shared time range picker input, repeat steps 6 through 8 from the "Add an input to the dashboard" procedure to connect them to that input.

7. Click Done.

Your dashboard should look like this:

6.2tutorial pivot dashboard2.png

Next steps

This completes the Data Model and Pivot Tutorial. Continue to the next chapter to read about what you can do next.

About dashboards
More Data model and Pivot resources

This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11


Thank you Carl for your comment. In Step 6, there is a note that points you to the steps to link the two panels to the same time range selection.

Lstewart splunk, Splunker
August 29, 2016

I would suggest to add a last step to link the last two panels to the time range selection as well, which in this case will require to convert the panels / reports inline.

August 25, 2016

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters