Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Implementing Splunk 7, Third Edition
  • Toc
  • feedback
Implementing Splunk 7, Third Edition

Implementing Splunk 7, Third Edition

5 (4)
close
Implementing Splunk 7, Third Edition

Implementing Splunk 7, Third Edition

5 (4)

Overview of this book

Splunk is the leading platform that fosters an efficient methodology and delivers ways to search, monitor, and analyze growing amounts of big data. This book will allow you to implement new services and utilize them to quickly and efficiently process machine-generated big data. We introduce you to all the new features, improvements, and offerings of Splunk 7. We cover the new modules of Splunk: Splunk Cloud and the Machine Learning Toolkit to ease data usage. Furthermore, you will learn to use search terms effectively with Boolean and grouping operators. You will learn not only how to modify your search to make your searches fast but also how to use wildcards efficiently. Later you will learn how to use stats to aggregate values, a chart to turn data, and a time chart to show values over time; you'll also work with fields and chart enhancements and learn how to create a data model with faster data model acceleration. Once this is done, you will learn about XML Dashboards, working with apps, building advanced dashboards, configuring and extending Splunk, advanced deployments, and more. Finally, we teach you how to use the Machine Learning Toolkit and best practices and tips to help you implement Splunk services effectively and efficiently. By the end of this book, you will have learned about the Splunk software as a whole and implemented Splunk services in your tasks at projects
Table of Contents (15 chapters)
close

Back to the dashboard


Our dashboard menu (changed slightly in version 7.0) includes selections in the upper-left corner, as shown in the following screenshot. We have already explored the first (Add Panel) in this chapter. Let's now move on to Add Input (we'll go over UI and Source a bit later on):

Add input

Adding an input to your dashboard will convert it to a form. All dashboards are actually made up of XML code (we touched a bit on this earlier when we introduced prebuilt panels). In the next section (Edit Source), we will dive deeper into this topic but, for now, understand that the dashboard that we have created is made up of or defined by the XML which Splunk is using, and adding any type of input will modify the underlying XML (in fact, after adding any input, the XML tag <dashboard> is changed to <form>).

Once you click on Add Input, you can select an input type from the list shown in the following screenshot:

For example, you can select Text to add a text field for user...

bookmark search playlist download font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete