Splunk® Enterprise

Dashboards and Visualizations

Splunk Enterprise version 9.0 will no longer be supported as of June 14, 2024. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.

Add panels to dashboards

Learn how to add and edit dashboard panels.

To learn about types of dashboard panels, see Working with dashboard panels.

Add panels using the Dashboard Editor

Add panels to a dashboard with the dashboard's Edit menu. Access the Edit menu directly from the dashboard or from the list of dashboards on the Dashboards page.

  1. Select Edit to open the dashboard editor.
  2. Select Add Panel.
  3. Expand one of the panel categories.
    • New
    • New from Report
    • Clone from Dashboard
    • Add Prebuilt Panel
  4. (Optional) To search for specific panels, enter text in the Filter text box.
  5. Select a panel and preview the selection.
  6. Click Add to Dashboard.

Filter the search for available panels

Use filters in the search field to locate or create specific panels. The search looks for specified terms in existing dashboards, panels, and reports. It provides results for new panels using the specified search terms, and links to existing dashboards and panels containing the terms.

The following tips can help you with searching and filtering.

  • Panel title or panel ID are useful items to search for.
  • Use visualization element names, input types, chart types, and other keywords to filter a search. For example:

    • Search for map to return results to dashboards implementing a map visualization or to create a new panel with the map visualization.
    • Search for multiselect for results with a multiselect form input.
  • You can filter for multiple items, but all items must appear in the order that you specify in the search field.

Rearrange panels on a dashboard

Drag and drop panels to rearrange their position on a dashboard.

  1. If you are not in edit mode for the dashboard, select Edit.
  2. Select a panel and drag it to its new position.

Create an inline panel for a dashboard

When you create an inline panel, you select a visualization and specify a search for the panel.

  1. Select Edit to open the dashboard editor.
  2. Select Add Panel.
  3. Expand the panel category New and select a visualization for the data.
  4. (Optional) Enter a title for the panel.
  5. Enter a search string that returns the data to display in the panel.
  6. (Optional) Select Run Search to preview the search results.
  7. Select a time range for the search.
  8. Click Add to Dashboard.

Create a panel from a report

When you create a panel from a report, you select from a list of available reports.

  1. Select Edit to open the dashboard editor.
  2. Select Add Panel.
  3. Expand the panel category New from Report to view available reports.
    (Optional) Use the Filter option to search for specific reports. See Filter the search for available panels.
  4. Select a report to view a preview of the report.
  5. Click Add to Dashboard.

Clone a panel from another dashboard

You can clone a panel from another dashboard. The panel appears on your dashboard with the same editing capabilities as the cloned panel.

  1. Select Edit to open the dashboard editor.
  2. Select Add Panel.
  3. Expand the panel category Clone from Dashboard to view available reports.
    (Optional) Use the Filter option to search for specific panels. See Filter the search for available panels.
  4. Select and expand a dashboard. Select a panel to view a preview of the panel.
  5. Click Add to Dashboard.

Create and add a panel by reference

You can create a panel that you can later add to dashboards by reference. This prebuilt panel is useful if you plan to reuse it often in various dashboards.

There are two ways to create a panel that you can reference from other dashboards.

  • Convert an existing panel to a prebuilt panel that you can reference.
  • Create a panel in simple XML code from the Settings page.

Typically, you create the panel using the dashboard editor, and then convert it to a prebuilt panel. You can also create the panel in simple XML code.

Convert an existing panel to a prebuilt panel

You can convert a panel to a prebuilt panel only if the panel does not contain a post-process search. A post-process search is a search that uses the base attribute to reference another search.

  1. In the dashboard containing the panel that you want to convert, select Edit > Edit Panels.
  2. From the Options Menu for a panel, select Convert to Prebuilt Panel.
  3. (Optional) In the dialog that opens, specify the following details.

    • ID: The filename for the panel. Only alphanumeric characters, '-' character, and '_' are allowed.
    • Panel Permissions: Select either Private or Shared in App.
      Private: Only you have permissions to view and edit the panel.
      Shared in App: The panel is available to view and edit by other users of the app.

Create a panel in Simple XML

If this is your first time working with Simple XML, see Editing simple XML. See also the Simple XML Reference for more information on panel configurations.

  1. From Splunk Web, go to Settings > User Interface > Prebuilt Panels.
  2. In the Panels page, select New to open the Simple XML Editor.
  3. In the Simple XML Editor, specify the following:

    • Destination app: Select an app for the context of the panel.
    • Prebuilt Panel ID: Enter a name for panel.
      The name you enter is the filename on disk. Only alphanumeric characters, '-' character, and '_' are allowed.
    • Prebuilt Panel XML: Simple XML code to define a panel element.
      The simple XML code for a reference panel contains only the <panel> element and its child elements.

Add a prebuilt panel to a dashboard

  1. From the dashboard, select Edit > Edit Panels.
  2. Select Add Panel.
  3. Expand the panel category Add Prebuilt Panel to view the reference panels available.
    (Optional) Use the Filter option to search for specific panels. See Filter the search for available panels.
  4. Select a reference panel to view a preview of the panel.
  5. Click Add to Dashboard.

Convert a prebuilt panel to an inline panel

You can convert a prebuilt panel to an inline panel. The prebuilt panel cannot contain a post-process search. A post-process search is a search that uses the base attribute to reference another search.

The conversion of a prebuilt panel to an inline panel lets you customize the search and visualization.

  1. From a dashboard, select Edit > Edit Panels.
  2. From the prebuilt panel you want to convert, click the Options Menu and select Convert to Inline Panel.

Edit a panel title

Panels and visualizations have separate titles.

You can specify a title when creating a panel. You can also use the dashboard editor to change panel titles, with one exception. Prebuilt panel titles cannot be edited in the dashboard editor. See Edit a prebuilt panel for more information.

Steps

  1. Locate the panel that you want to edit in a dashboard.
  2. Click Edit to open the dashboard editor.
  3. Use one of the following options.
  4. Option What to do
    Editing user interface
    1. Next to Edit Dashboard at the top left of the page, make sure that the UI editor is selected.
    2. Click the panel title that you want to edit and change the text.
    Edit Simple XML
    1. Next to Edit Dashboard at the top left of the page, make sure that the Source editor is selected.
    2. Locate the <title> element inside the <panel> that you want to edit.
    3. Change the panel title text.
  5. Click Save.

Edit a prebuilt panel

Use the Prebuilt Panels page to access a panel source code editor.

Steps

  1. From the home page, navigate to Settings > User Interface > Prebuilt Panels.
  2. Locate the panel that you want to edit and select Edit.
  3. Edit the Simple XML source code.
  4. Click Save. The panel is updated in dashboards that include it by reference.

Delete a panel from a dashboard

You can delete a panel from a dashboard using the Dashboard Editor or by editing the simple XML code.:

  • From the Dashboard Editor, in panel-editing mode, click the Options menu for a panel and select Delete.
    Or you can click the Delete icon, X, which is in the upper right corner of the panel.
  • In simple XML source code, delete the <panel> element and its contents.
Last modified on 29 June, 2017
Working with dashboard panels   Edit dashboards

This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13, 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.1.11, 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.2.8, 8.2.9, 8.2.10, 8.2.11, 8.2.12, 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.3.0, 9.3.1, 9.3.2, 8.1.10, 8.1.12, 8.1.13, 8.1.14


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters