Chapter 7. Form-Based Dashboards

In this chapter, we will discuss how to create some drilldown dashboards, and add some fun functionality such as contextual drilldowns and passing variables from form to form. Form-based dashboards ease the Splunk adoption process and enable a developer to build apps that a user can simply point and click, and report on the information that they need. This helps less knowledgeable users get value out of the data that is being consumed by Splunk.

We will learn about:

  • Reports
  • Dashboards
    • Form-based
    • Search-based
    • Drilldown
    • Report/Data model

  • Modules
    • Data input
    • Chart
    • Table
    • Single value
    • Map module

  • Tokens
  • Building a form-based dashboard

Dashboards versus reports

The differences in dashboards and reports is pretty slight, although important ...

Get Splunk Best Practices now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.