Splunk® Enterprise

Splunk Dashboard Studio

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

What's new in Dashboard Studio

Stay up-to-date with new features and functionality in Splunk Dashboard Studio.

What's New in Splunk 9.2.0

This information is subject to change prior to general availability of the release.

New feature or enhancement Description
Link to reports or searches You can configure a link to a report or search from a dashboard. For example, during an investigative workflow, you can click on a dashboard element that opens an associated saved search in a new tab.
Workflow actions for the events viewer visualization You can configure workflow actions with your events viewer visualizations. For more details, see Events viewer.
Classic Simple XML to Dashboard Studio post-conversion report After converting a Classic Simple XML dashboard to Dashboard Studio, a post-conversion report lists dashboard elements that need manual updating. For more details, see About conversion from Simple XML to Dashboard Studio.
Larger code editor in the Configuration panel You can expand the source code editor in the Configuration panel to modify the source code of the selected dashboard element.
Trellis layout for single value visualizations You can apply a trellis layout for single value, single value icon, and single value radial visualizations. For more details, see Trellis layout.
Directly add new or existing reports and saved searches to Dashboard Studio You can add reports and saved searches to your Dashboard Studio dashboard from the Reports and Search pages. For more details, see Use reports and saved searches with ds.savedSearch
Conditionally show or hide panels in the grid layout You can organize your dashboard by conditionally showing or hiding panels based on data availability in the grid and absolute layout. For more details, see Conditionally show or hide panels

What's New in Splunk 9.1.0

This information is subject to change prior to general availability of the release.

New feature or enhancement Description
Feature flag for external content warning in Simple XML and Dashboard Studio dashboards This flag controls whether users receive warnings for external content from untrusted domains. For more details, see External content and redirection feature settings.
Dashboards Trusted Domains List enforcement External content domains not listed in the Dashboards Trusted Domains List will be blocked. For more details, see Configure Dashboards Trusted Domains List and Content Security Policy setting.
Export the data results of any visualization to a CSV You can export the data results of any visualization, including search results from base and chain searches, to a CSV for a shareable compact file format. For more details, see Export a visualization.
Updated base search refresh behavior Base searches no longer need to refresh if only an associated chain search SPL changes. For example, if a chain search SPL changes due to a token value change, and the base search does not change, then the base search doesn't refresh. Only the associated chain search SPL changes. This update improves performance and reduces resource consumption. For more details, see Chain searches together with a base search and chain searches.
Chain search creation increases from two to ten You can create up to ten chain searches instead of the original two. For more details, see Chain searches together with a base search and chain searches.
Improved readability of dashboard definitions in Views Instead of a single line of code, the JSON dashboard definition has expanded into multiple lines with indentations. You can find a dashboard's definition in User interface under the admin Settings on the Views page.
New Auto display mode option for dashboards Auto display mode is the default for new dashboards and selects the best zoom level, up to 100%, for your dashboard's visibility. Manually zooming in and out will override the auto display mode. Select Auto in the zoom dropdown list to reset to Auto display mode. For more details, see Set up a dashboard.
Inputs now available in the canvas You can place inputs directly in a dashboard canvas and also resize the inputs. For more details, see Adding and configuring inputs.
Show or hide panels in Absolute layout You can configure dashboards to conditionally show or hide panels in Absolute layout, depending on whether data is available to display. For more details, see Conditionally show or hide panels.
Choropleth map layers for map visualizations You can apply choropleth map layers to map visualizations in addition to the existing bubble and marker layers. For more details, see Maps.
Configuration UI for axes charts Axes charts, such as bar, line, and scatter, have new configuration UI for most options previously only available via source code.
Events viewer visualization You can view event data and interact with field-value pairs with the events viewer visualization. Workflow actions and special parameters are not supported in this release. For more details, see Events viewer.
Interactions now supported on Markdown When Markdown text has associated tokens, your cursor can hover over and select the text for token setting.
Data sources indicate when they're unused Unused data sources have their names turned a lighter shade of gray, and the words "(Unused)" attached.
Dashboards automatically produce the same theme preferences as the creating user's theme preferences Any new dashboard you create keeps its theme consistent with your theme preference. The theme stays constant with the original specified theme during creation and only changes if manually updated. The theme doesn't automatically switch to the viewing user's preferred theme.
Token usage improvements The following are new improvements for tokens:
  • Setting tokens from images
  • Default values will apply to tokens when the dashboard is saved
  • View all tokens on the target dashboard when configuring drilldowns, including but not limited to input tokens
Add rectangle shapes to grid layout dashboards Apply rectangle shapes to grid layout dashboards to add padding or empty space.
Open in Search link When editing a search in the data source editor, you can select Open in Search to open a new tab in Search with your search's SPL.
View dashboards from mobile device You can view dashboards on mobile devices with a QR code. For more details, see View dashboards on a mobile device.
Inspect visualization panel You can inspect specific visualization panels to launch the job inspector to check search performance or search ID.
Map visualization improvements The following are new enhancements for the map visualization.
  • Tooltips for latitude and longitude
  • Size information for map bubbles
  • Field selection for map bubble size
  • Drilldowns available for setting tokens, linking dashboards, and linking custom URLs

For more details, see Maps.

Markdown font size option You can specify a font size in Markdown. For more details, see Use Markdown to add text, links, and images.
Table visualization improvements You can adjust the width of a table's column and change the font size of a cell. For more details, see Table.
Edit permissions from View mode You can edit permissions while viewing a dashboard instead of navigating to the listing page to change the permissions.
Set tokens for Single Value Icon visualization. You can use drilldown to set tokens for the Single Value Icon visualization. For more details, see Setting tokens on a visualization click.
Additional search job metdata for token usage The following search job metadata are available for using as tokens:
  • job.sid
  • job.percentComplete
  • job.lastUpdate
  • job.isRealTimeSearch
Placeholder image updates Placeholder images now have a new default image.
Search status updates Status icons on visualizations will now provide more detailed information.
New naming convention for visualizations and searches Unnamed visualizations and searches will receive more descriptive names when you add visualizations from search or convert visualizations from Simple XML. For example, if a dashboard has two unnamed tables, those tables update to Table 1 and Table 2 instead of "Unnamed".

What's New in Splunk 9.0.0

This information is subject to change prior to general availability of the release.

New feature or enhancement Description
Set tokens from search results You can set tokens from search results or search job metadata. For more details, see Setting tokens from search results or search job metadata.
Set default token values You can set default tokens using the UI or in the source code. For more details, see Default token and Example of setting a token.
Link to other dashboards You can link to other dashboards and pass tokens from one dashboard to the next. For more details, see Linking interactions.
Link to a custom URL You can link to a custom URL. The URL can be relative, such as coming from a local site, or absolute from an external site. For more details, see Linking interactions.
Set a home page dashboard You can set a Dashboard Studio dashboard as your home page dashboard. In View mode, navigate to the Actions dropdown and select Set As Home Dashboard.
Configure dynamic coloring by matching values Using the UI or source code, you can configure each element in a data series to find a corresponding color value and return the matched value. For more details, see Formatting functions.
Updated match value You can now match string values in addition to numerical ranges.
Updated visualizations Excluding maps, all visualizations now have updated versions that provide enhanced dashboard building flexibility, such as setting tokens on a visualization click.
Create cluster maps Dashboard Studio now supports cluster maps with bubble and marker layers. For more details, see Maps.
Create parallel coordinates Create parallel coordinate charts to depict relationships in multi-dimensional datasets. For more details, see Parallel coordinates.
Create link graphs Create link graphs to visualize the relationship between data values. For more details, see Link graphs.
Create Sankey diagrams Create Sankey diagrams to visualize node entities and the proportional flow between them. For more details, see Sankey diagram.
Updated Markdown You can add font color and background color to Markdown. For more details, see Use Markdown to add text, links, and images.
Updated table You can show internal fields in tables. For more details, see Table.
Updated single value radial Single value radial has a new UX, and you can now specify a maximum value greater than 100. For more details, see Single value visualizations.
Updated UI for adding a time range picker You can add a time range picker to your dashboards. For more details, see Time range.
Updated UI for adding searches to inputs and configuring time ranges for the searches You can use searches to populate the values displayed in inputs. For more details, see Use inputs to make dashboards dynamic.
Updated Examples Hub landing page The Examples Hub has a new landing page for improved navigation and updated visualization examples. For more details, see Splunk Dashboard Studio Examples Hub.
Hide the Edit and Open in Search buttons You can share dashboards with view mode settings and hide the buttons for editing or opening searches. For more details, see Apply view mode settings for dashboards.
Bulk migration from viz.[type] to splunk.[type] If your visualizations still use the viz.[type] syntax, you can migrate from viz.[type] to splunk.[type] when your dashboard refreshes. At the beginning of each reload, a banner prompts you to migrate with one click. For more details, see Migrate to the splunk.[type] syntax.
Dashboards image allow list The dashboards image allow list is a list of authorized URL domains that aids the management of external images. Images without a domain specified in the list will not render in the dashboard. You can add the image's URL domain to the list to permit an external image.
Improved performance for dashboards with many objects Dashboard Studio edit mode is more responsive, and dashboards load faster.
Updated UX for unsaved changes Dashboard Studio will prompt you to save your changes before navigating to a different page.
Last modified on 27 November, 2023
PREVIOUS
Convert a Simple XML dashboard to a Dashboard Studio dashboard
  NEXT
About the Splunk Dashboard Studio tutorial

This documentation applies to the following versions of Splunk® Enterprise: 9.2.0, 9.2.1


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters