Splunk® Enterprise

Search Tutorial

Acrobat logo Download manual as PDF


Splunk Enterprise version 7.0 is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Add more panels to dashboards

Earlier in this tutorial you ran searches and saved them as reports. In this section, you add the saved reports to an existing dashboard. You will also add more panels based on ad hoc searches.

Add saved reports to a dashboard

Prerequisite

Ensure that you have the Buttercup Games - Purchases dashboard displayed, which you created in the task Create dashboards and panels.

Steps

  1. To display a list of your dashboards, click Dashboards on the Apps bar and select the Buttercup Games - Purchases dashboard.
    This screen image shows the Dashboards. There are three dashboards listed on the page. The Buttercup Games - Purchases dashboard is the dashboard that you created. The other dashboards are built-in with the Splunk product.
  2. In the Actions column, click Edit and select Edit Panel. The Edit Dashboard page opens.
  3. Click Add Panel.
    The Add Panel sidebar menu opens on the right side of the window.
    This screen image shows the sidebar for Add Panel.
  4. To add a new panel from a report, click New from Report.
    The list shows reports that you saved and built-in reports.
    This screen image shows the list of saved reports.
  5. Select Purchasing trends.
    A preview of the report appears. This is the sparkline chart report that you created.
    This screen image shows a preview of the Purchasing trends report.
  6. Click Add to Dashboard.
    The new panel is placed at the bottom of the dashboard. The Add Panel sidebar menu is still on the screen.
  7. Select the report Comparison of Actions and Conversion Rates by Product and add it to the dashboard.
    This screen image shows the preview panel for the report called "Comparison of Actions and Conversion Rates by Product".
  8. Close the Add Panel sidebar.
  9. Rearrange the panels on the dashboard.
    Drag and drop a panel by the panel drag and drop bar, which is at the top of the panel. When you drag a panel, a four pointed arrow symbol appears on the drag and drop bar.
    This screen image shows the   "Comparison of Actions and Conversion Rates by Product" panel being dragged to appear side-by-side next to the "Purchasing trends" panel.
  10. In the Edit Dashboards window, click Save to save your changes to the dashboard.
    Your finished dashboard should look like the following image.
    This screen image shows the Comparison of Actions and Conversion Rates by Product" panel at the top of the dashboard. The other two panels appear side-by-side at the bottom of the dashboard.

Adding a search to an existing dashboard

You can save an ad hoc search as a panel in an existing dashboard.

In the Enabling field lookups section in this tutorial, you created the prices_lookup. Let's use that lookup to run the following search.

  1. Click Search in the Apps bar to start a new search.
  2. Make sure that the time range is set to All time.
  3. Run the following search to determine the VIP client and the products that the client purchased.

    sourcetype=access_* status=200 action=purchase [search sourcetype=access_* status=200 action=purchase | top limit=1 clientip | table clientip] | stats count AS "Total Purchased", dc(productId) AS "Total Products", values(productName) AS "Product Names" BY clientip | rename clientip AS "VIP Customer"

    This screen image shows the results on the Statistics tab. The first column shows the client IP address. The second column shows that the customer made 134 purchases. The third column shows the names of the products that were purchased.

  4. Click Save As and choose Dashboard panel.
  5. For Dashboard, click Existing and select Buttercup Games - Purchases.
  6. For Panel title, type VIP Client Purchases.
  7. Click Save.
  8. Click View Dashboard.
  9. Click Edit.
  10. In the dashboard editor, drag the VIP Client Purchases panel next to the Top Purchases by Category pie chart.
  11. Click Save.
  12. This screen image shows the dashboard. There is a time range picker at the top right of the dashboard. There are four panels on the dashboard. The two panels at the top are the Top Purchases by Category, which shows a pie chart, and the VIP Client Purchases, which shows a table.  The other two panels are the Purchasing trends and Comparison of Actions and Conversion Rates by Product.

Connecting panels to a shared Time Range Picker

The type of panel that you add to a dashboard determines whether you can connect the panel to the shared Time Range Picker.

The Buttercup Games - Purchases dashboard now contains the panels listed in the following table.

Panel name Panel source
Top Purchases by Category Ad hoc search
Purchasing Trends Report
Comparison of Actions and Conversion Rates by Product Report
VIP Client Purchases Ad hoc search

If the panel is based on an ad hoc search, you can connect the panel to the shared Time Range Picker. If the panel is a report, you cannot connect it to the shared Time Range Picker. Reports can be scheduled to run at a set time interval.

To connect the VIP Client Purchases panel to the shared Time Range Picker:

  1. In the dashboard panel click the Edit Search icon. The icon looks like a magnifying glass.
  2. In the Edit Search dialog box, for Time range select Shared Time Picker (BG_Purchases_Time_Range).
  3. Click Apply.
  4. In the Edit Dashboard window, click Save to save the changes to the dashboard.


The VIP Client Purchases panel is now connected to the Time range picker input on the dashboard.

When you change the time range on the dashboard, the panels that are connected to the shared Time Range Picker are updated. The searches that the panels are based on are run again to refresh the panels.

More dashboard actions

After you create a dashboard, use the buttons in the upper right corner to take actions on the dashboard, such as:

  • Export the dashboard
  • Convert the dashboard to HTML
  • Edit the permissions to share the dashboard with other users

Next step

Congratulations! You have completed the Search Tutorial.

To learn more, see Additional Resources.

Last modified on 27 March, 2018
PREVIOUS
Create dashboards and panels
  NEXT
Additional resources

This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters