Splunk® Light (Legacy)

Search and Reporting Examples

Acrobat logo Download manual as PDF

On October 22, 2021, Splunk Light will reach its end of life. After this date, Splunk will no longer maintain or develop this product.
Acrobat logo Download topic as PDF

Add a single value panel to a dashboard

Some searches return a single value output. You can visualize this data with Splunk Light's single value display options. In this scenario, use your data to determine the number of root users.

  1. Click Search in the Splunk Light bar.
  2. Type the following into the search bar.

    sourcetype=ps root | stats count

  3. Click the Visualization tab.
  4. In the chart type menu, select Single Value (appears as a 42). You can format the color of the display for specific number ranges, indicating when a value gets too high or too low.
  5. (Optional) To see your data as a radial gauge, select Radial Gauge from the chart type menu. Format it for the correct number ranges.
  6. Click Save As, and click Dashboard Panel.
  7. Add your visualization to your existing dashboard.
  8. Name your panel Number of root users.
  9. Click Save.
  10. To view your changes, click View Dashboard.

Your dashboard now contains six panels: two prebuilt panels, an in-line search panel, two table panels, and a single value data panel.

Last modified on 10 August, 2016
Add tables to a dashboard
Edit dashboard panels

This documentation applies to the following versions of Splunk® Light (Legacy): 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters