Splunk® Enterprise

Data Model and Pivot Tutorial

Download manual as PDF

Download topic as PDF

Add pivots to a dashboard

This topic continues where you left off in Part 3: Designing a Pivot Report. The last pivot you created was a pie chart. If you haven't created that chart, you can return to the previous topic and do so. Now, you will save that visualization to a new dashboard panel and then add all previous pivot reports to the same dashboard.

Save a Pivot as a dashboard panel

You just created a pie chart, now let's save it to a dashboard panel.

  1. Click Save as and select Dashboard panel.
    6.2tutorial pivot savetodashboard.png
    This opens the Save as Dashboard Panel dialogue.
    6.3 Tutorial pivot savetodashboard2.png

  2. Define a new dashboard to save the panel to:
    • For Dashboard, click New.
    • Enter the Dashboard Title: Buttercup Games. The Dashboard ID will update with Buttercup_games.
    • (Optional) Add a Dashboard Description: Reports on Buttercup Games online shop data.
  3. Define the dashboard panel:
    • Enter the Panel Title: Successful Purchases by Category
    • Leave the Panel Powered BY as Inline search.
    • For Panel Content, click Pie.
  4. Click Save. The dashboard was successfully created.
  5. To continue, click View Dashboard.
    6.2tutorial pivot dashboard.png

View and edit dashboard panels

After you save a dashboard, you can access it by clicking Dashboards in the app navigation bar.

  1. Click Dashboards in the app navigation bar. This takes you to the Dashboards listing page. PIvot Tutorial DashboardsLists.png
    You can Create a new dashboard and edit existing dashboards. You see the Buttercup Games dashboard you just created.
  2. Under the i column, click the arrow next to Buttercup Games to see more information about the dashboard: What app context it is in, whether or not it is scheduled, and its permissions.
    Pivot Tutorial DashboardsListInfo.png
    There are also quick links to edit the dashboard's Schedule and Permissions inline with the information. To view the dashboard, click the dashboard's Title or select the Edit option under Actions. Note: If you click to view a dashboard and you cannot view it (or it displays blank), check that you have read access to the data model. To do this, go to the Manage Data Models view and edit the Permissions for the Buttercup Games data model to share in the App.

Add an input to the dashboard

  1. In the Dashboards list, click Buttercup Games to return to that dashboard.
  2. Click Edit. The Edit: Buttercup Games view opens.
    In this view, you have edit buttons: Add Input, Add Panel, and Source.
  3. Click Add Input and select Time.
    Tutorial Pivot AddInput.png
    This adds a shared time range picker input to the dashboard editor.
    Jackhammer Dashboard panel edit shared time range picker.png

  4. Click the Edit Input icon for the time range picker. It looks like a pencil. This opens a set of input controls. The Time input type should be preselected.
    JackhammerTutorial Pivot Edit Time Inputtoken.png

  5. Change the Token value to Buttercup_Games_Time_Range and click Apply. This optional step redefines the name of the input token for the time range picker. Because the default names of input tokens are not very descriptive (field1, field2, field3, and so on), you may want to do this when you give your dashboard multiple inputs. It makes it easier to understand which input you are working with. You can also optionally change the default time range for the picker by changing the value of Default. Right now it defaults to Last 24 hours. In the next two steps you connect your dashboard panel to this time range picker.
  6. In the new dashboard panel, click the Inline Pivot icon and select Edit Search String. The Edit Search dialog opens. 6.3 Tutorial pivot panel edit search timerange.png

  7. Click Time Range Scope and select Shared Time Picker (Buttercup_Games_Time_Range).
  8. Click Save. The panel is now hooked up to the shared time range picker input. The inline search that powers the panel now uses the time range selected for the shared time range picker. As you add panels to this dashboard, repeat steps 6 through 8 to hook the new panels up to the shared time range picker input. You can have dashboards that offer a mix of panels that work with the shared time range picker and panels that show data for fixed time ranges. If your dashboard does not appear, try refreshing the page.
  9. Click Done to save your changes to the dashboard.
    TutorialPivot Addinput.png

Add saved reports to the dashboard

Add another panel using one of the saved reports you created earlier.

  1. In the Buttercup Games dashboard, click Edit.
  2. In the Edit: Buttercup Games view, click Add Panel. The Add Panel sidebar menu slides open.
  3. To add a new panel from a report, click New from Report. PivotTutorial NewFromReport.png

  4. Click Total Purchase Requests. This slides open a preview panel with information about the saved report. Pivot Tutorial New From Report.png

  5. Click Add to Dashboard. The new panel is placed in the dashboard editor. You can click anywhere to close the Add Panel sidebar menu or choose another report to add to the dashboard. Before you close the Add Panel sidebar menu, add a second report.
  6. Click Purchases by Product.
    Pivot Tutorial NewFromReport3.png
  7. Click Add to Dashboard.
  8. Close the sidebar menu. While in the dashboard editor view, drag and drop the panels to rearrange them on the dashboard. Note: If you want the new panels to work with the shared time range picker input, repeat steps 6 through 8 from the "Add an input to the dashboard" procedure to connect them to that input.

  9. Click Done. Your dashboard should look like this: Pivot Tutorial dashboard.png

Next steps

This completes the Data Model and Pivot Tutorial. Continue to the next chapter to read about what you can do next.

PREVIOUS
About dashboards
  NEXT
More Data model and Pivot resources

This documentation applies to the following versions of Splunk® Enterprise: 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters