11/22/2023 0 Comments Anchored splunk definitionYou can change this unique ID as long as it remains unique in your dashboard definition. Each data source must have a unique ID that is seperate from the title you might give it. When you create a new data source in the form of an an ad hoc search through the visual editor Configuration panel, a unique ID is created for each data source automatically. ![]() The dataSources section of the dashboard definition is where you can modify the data source stanzas created in the source editor when you add searches to your visualizations. An Add-on is typically a single component that you can develop that can be re-used across a number of different use cases.It is usually not specific to any one single use case.It also won’t contain a navigable user interface.You cannot open an Add-on from the Splunk Enterprise Home Page or the App menu. "description": "Add a timerange picker to modify a search time span." "query": "index=_internal | top limit=100 sourcetype | eval percent = round(percent,2)" "description": "Chart of Top Sourcetypes between $TimeRange.earliest$ and $TimeRange.latest$" There is an overview of each section in this topic. The following dashboard definition is a complete example. The dashboard definition is the JSON source code that renders the dashboard in the visual editor. The source editor is where you create your dashboard definition. You might want to use a JSON validator to ensure that your formatting is correct. However, you will not be able to click Back to save your changes if you have formatting errors. The source editor provides limited validation.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |