Creating a form from a dashboard

First, let's think of a use case that we might be able to use with our previous example. How about a form that tells us about the forecast events for a particular year? Let's start with our previous search example:

sourcetype="*" Forecast | timechart count as "Forecast Events" by  date_month 

Since we have already created a dashboard from this query earlier in this chapter, let's look at the XML for our dashboard. As we did earlier, click on Source (on the dashboard editor). The XML for our dashboard looks like the following code. Notice the occurrence of two <panel> tags within our XML, indicating that there are two panels in our dashboard:

<dashboard> <label>Forecast Events</label> <description>This is my ...

Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.