Splunk® Enterprise

Dashboards and Visualizations

Download manual as PDF

Download topic as PDF

Dashboard overview

Create new dashboards or edit existing ones.

For a quick glance at the most common use cases and commands for creating dashboards, note that you can access the Splunk Dashboards Quick Reference guide by clicking the link in Getting started.

The dashboard and form workflow

Working with dashboards includes one or more of the following tasks.

Build dashboards

  • Create a new dashboard
  • Add new visualizations to a dashboard

For more information on building dashboards, see Create a dashboard

Edit dashboards

  • Add a panel to a dashboard
  • Edit dashboard panels and panel visualizations
  • Manage dashboard searches

For more information on editing dashboards, see Edit dashboards

Convert a dashboard to a form

  • Add user inputs to a dashboard to convert it to a form
  • Edit forms
  • Work with user input settings

For more information on forms, see Create and edit forms

Customize Simple XML

  • Edit Simple XML source code to customize a dashboard or form.

For more information on using Simple XML, see Editing Simple XML

Add interactive and dynamic behavior

  • Use tokens to capture and transfer data.
  • Add event handlers to implement dynamic behavior.

For more information on event handlers and tokens, see Use drilldown for dashboard interactivity and Token usage in dashboards

Tools and frameworks

To build and edit dashboards, use one or more of the following tools and frameworks.

Dashboard editor user interface

Build and edit dashboards using the Splunk Web user interface.

Simple XML

Dashboards use Simple XML source code to define their content and behavior. You can use the dashboard editor in Splunk Web to edit this source code.

To learn more, see Editing Simple XML.

Developer options

Splunk Enterprise users can implement additional dashboard customizations.

  • Extend Simple XML using CSS and JavaScript.
  • Convert a Simple XML dashboard to HTML and use JavaScript to implement customizations including inputs and REST API access.

For more information, see the following Splunk developer portal resources.

Dashboards converted to HTML have some editing limitations in Splunk Web. They also cannot be exported to PDF.


The Dashboard Examples app on Splunkbase provides many dashboard implementation examples, including source code. Install the app to view and interact with the example dashboards.

Deprecated options

The following dashboard framework options are deprecated as of version 6.3.0:

  • Advanced XML
  • Module System (Deprecated as part of Advanced XML).

For information on other customization options, see: Building customizations for the Splunk platform

Removed options

The following dashboard framework options is removed as of version 7.3.0.

Option For more information see
Django Bindings Removed features in the Splunk Enterprise 7.3.0 Release Notes.
Last modified on 17 August, 2020
Use trellis layout to split visualizations
About the dashboard editor

This documentation applies to the following versions of Splunk® Enterprise: 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.1.0

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters