Example 1 - Simple customizations

Important notice: As part of Advanced XML deprecation, the Module System is officially deprecated beginning with Splunk Enterprise 6.3. For more information, see Advanced XML Deprecation.

Example1.xml

<view template="dashboard.html">

 <label>Example 1: A Basic Application</label>
 <module name="AccountBar" layoutPanel="appHeader"/>
 <module name="AppBar" layoutPanel="navigationHeader"/>
 <module name="Message" layoutPanel="messaging">
   <param name="filter">*</param>
   <param name="clearOnJobDispatch">False</param>
   <param name="maxSize">1</param>
 </module>
  
 <module name="StaticContentSample" layoutPanel="panel_row1_col1">
   <param name="text"><![CDATA[

<h1>Example 1: A Basic Application</h1> <p> This simple application searches the metrics log and lists the CPU utilization of each indexer stage, for the last seven days. </p> <p> Search string: <tt>index=_internal source=*metrics.log group=pipeline | stats sum(cpu_seconds) as totalCPU by name</tt> </p> <p> Results are displayed using the <tt>SimpleResultsTable</tt> module. </p> ]]></param>

 </module>
  
 <module name="HiddenSearch" layoutPanel="panel_row2_col1" group="CPU Utilization" autoRun="True">
   <param name="search">index=_internal source=*metrics.log group=pipeline | stats sum(cpu_seconds) as totalCPU by name</param>
   <param name="earliest">-7d</param>
   <module name="<span class="keyword">SimpleResultsTable</span>"></module>
 </module>

</view>

default.xml

<nav>

 <collection label="Examples">
   <view name="Example1" />
   <view name="Example2" />
   <view name="Example3" />
   <view name="Example4" />
   <view name="Example5" />
   <view name="Example6" />
   <view name="Example7" />
   <view name="Example8" />
 </collection>

</nav>