Implementing Splunk: Big Data Reporting and Development for Operational Intelligence

Using wizards to build dashboards

Using some of the queries from previous chapters, let's make an operational dashboard for errors occurring in our infrastructure. We will start by making a query (note that this query relies on the loglevel fields we created in Chapter 3, Tables, Charts, and Fields):

sourcetype="impl_splunk_gen" loglevel=error | timechart count as "Error count" by network

This will produce a graph like this one:

To add this to a dashboard, we perform the following steps:

1. Choose Create | Dashboard panel….
   
2. This opens a wizard interface that ...