Splunk® Enterprise

Dashboards and Visualizations

Splunk Enterprise version 7.1 is no longer supported as of October 31, 2020. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.

Getting started

Learn how to share insights with data visualizations and dashboards.

To view a PDF that offers you a short overview of the most common operations, definitions, and commands you will use when you create dashboards and visualizations, see the Splunk Dashboards Quick Reference Guide.

7.1 Failed Logins.png

The visualization and dashboard workflow

You might need to generate a new visualization or edit an existing dashboard. Working with dashboards and visualizations includes one or more of the following tasks.

Select a visualization

  • Select a visualization to show specific data insights.
  • To find and compare visualization options, see the Visualization reference.

Generate and configure visualizations

  • Write a search to generate a visualization. Make sure that the search returns results in the correct format for rendering the visualization. See Data structure requirements for visualizations for an overview about data formatting.
  • Configure or update visualization appearance and behavior. Change color modes, add captions, or adjust other visualization elements. See the Visualization reference for an overview of options and links to details on each visualization type.

Build and edit dashboards

  • Add visualizations to new or existing dashboards.
  • Work with the editing user interface to adjust dashboard components.
  • Convert a dashboard to a form by adding user inputs.
  • To get started, see the Dashboard overview and Create dashboards.

Share and manage dashboards

Edit Simple XML

Last modified on 04 March, 2021
  Visualization reference

This documentation applies to the following versions of Splunk® Enterprise: 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.1.10, 8.1.11, 8.1.12, 8.1.13, 8.1.14


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters