SFBA Splunk User Group Meeting August 10, 2022: Splunk Dashboard Studio & Driving Customer Success

1. © 2019 SPLUNK INC.
Welcome to the August SF Bay
Area Splunk User Group Meeting!
SFBA User Group Leader:
Becky Burwell, Sr. Production Engineer, Yahoo
burwell@yahooinc.com

2. © 2019 SPLUNK INC.
Agenda
● Welcome!
● Announcements
● Ryan O’Connor: Dashboard
Studio & Splunk UI
● Rinata Datta: Driving
Customer Success
● Discussion

3. © 2019 SPLUNK INC.
Splunk Dashboard Studio & Splunk UI
Ryan O’Connor, Product Manager, Splunk

4. © 2022 SPLUNK INC.
Dashboard Studio
and Splunk UI
Ryan O’Connor

5. This presentation may contain forward-looking statements regarding future events, plans or the
expected financial performance of our company, including our expectations regarding our products,
technology, strategy, customers, markets, acquisitions and investments. These statements reflect
management’s current expectations, estimates and assumptions based on the information currently
available to us. These forward-looking statements are not guarantees of future performance and
involve significant risks, uncertainties and other factors that may cause our actual results,
performance or achievements to be materially different from results, performance or achievements
expressed or implied by the forward-looking statements contained in this presentation.
For additional information about factors that could cause actual results to differ materially from those
described in the forward-looking statements made in this presentation, please refer to our periodic
reports and other filings with the SEC, including the risk factors identified in our most recent quarterly
reports on Form 10-Q and annual reports on Form 10-K, copies of which may be obtained by visiting
the Splunk Investor Relations website at www.investors.splunk.com or the SEC's website at
www.sec.gov. The forward-looking statements made in this presentation are made as of the time and
date of this presentation. If reviewed after the initial presentation, even if made available by us, on our
website or otherwise, it may not contain current or accurate information. We disclaim any obligation to
update or revise any forward-looking statement based on new information, future events or otherwise,
except as required by applicable law.
In addition, any information about our roadmap outlines our general product direction and is subject to
change at any time without notice. It is for informational purposes only and shall not be incorporated
into any contract or other commitment. We undertake no obligation either to develop the features or
functionalities described, in beta or in preview (used interchangeably), or to include any such feature
or functionality in a future release.
Splunk, Splunk> and Turn Data Into Doing are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other
brand names, product names or trademarks belong to their respective owners. © 2022 Splunk Inc. All rights reserved.
Forward-
Looking
Statements
03.10.22-15:28

6. © 2021 SPLUNK INC.
© 2022 SPLUNK INC.
Why build with
Dashboard Studio?

7. © 2022 SPLUNK INC.
Craft a
story with
dashboards
Create data-dense visual
representations of:
● Workflows & processes
● Floor plans & maps

8. © 2022 SPLUNK INC.
Quickly
customize
dashboards
With native support for:
● Pixel perfect placement
● Images & custom SVG

9. © 2022 SPLUNK INC.
Reduce
and reuse
searches
Reduce searches by:
● Using one search for
multiple charts
● Leveraging base and
chain searches

10. © 2021 SPLUNK INC.
© 2022 SPLUNK INC.
Tips for building with
Dashboard Studio

11. © 2022 SPLUNK INC.
Splunk Compatibility
Keep in mind:
● Requires 8.2.0+
● Note the differences
between 8.2 and 9.0
Feature Support in 8.2 Feature Support in 9.0
Visualizations
● splunk.*: Single Values, Table, Choropleth
SVG
● For text: viz.text
Interactivity & Tokens
● Set tokens from inputs
● Link to custom URL (with tokens)
View options
● Full screen mode
● On-demand export to PNG/PDF
Visualizations
● splunk.*: all except World and US maps
● New: Sankey, Parallel Coordinates, Link
Graph, Cluster Maps
● For text (and other things): splunk.markdown
Interactivity & Tokens
● Set tokens from inputs, viz click, and search
● Link to custom URL and Link to dashboards
(with tokens)
View options
● Full screen mode
● On-demand export to PNG/PDF
● Set Studio as home dashboard
● Hide Edit, hide Open in Search
Tip: If you want your app to work with 8.2,
build your dashboard on 8.2 to ensure
you're only using features supported in
8.2

12. © 2022 SPLUNK INC.
Tips for working with images
● Package images in your app's static
folder and reference it in the
dashboard with a relative path
Example:
/static/app/splunk-dashboard-studio/images/examples-hub/workplace/workforce_
background.png
● Base64 encode images or embed
SVGs directly into the definition
● Include maps, diagrams, or
placeholder boxes in the background
image to create a template and
reduce the number of objects on the
dashboard

13. © 2022 SPLUNK INC.
Optimize the
number of
searches
Use field selector to display
multiple KPIs from one
search

14. © 2022 SPLUNK INC.
Optimize the
number of
searches
Create chain searches

15. © 2022 SPLUNK INC.
Splunk®
UI
Toolkit (SUIT)
Introduced at .conf21 by Splunk UI
Team (see DEV1134A)
Publically available:
• Documentation: https://splunkui.splunk.com
• Download: Hosted on NPM
Used in:
• Splunk®
Enterprise
• Splunk®
Enterprise Security
• ITSI
• 100’s of apps on Splunkbase™
• Many more! See our updated list here.

16. © 2022 SPLUNK INC.
What is the Splunk UI Toolkit (SUIT)?
Splunk UI (@splunk/react-ui)
Splunk Visualizations (@splunk/visualizations)
Unify Dashboard Framework
(@splunk/dashboard-core)
Dashboard Studio
● Splunk UI Toolkit
(SUIT)
● Not a SUIT Package
● Built on-top of SUIT

17. © 2022 SPLUNK INC.
What is the Splunk UI Toolkit (SUIT)?
Splunk UI (@splunk/react-ui)
Splunk Visualizations (@splunk/visualizations)
Unify Dashboard Framework
(@splunk/dashboard-core)
Dashboard Studio
● Splunk UI Toolkit
(SUIT)
● Not a SUIT Package
● Built on-top of SUIT
I live here

18. © 2022 SPLUNK INC.
What is the Splunk UI Toolkit (SUIT)?
Splunk UI (@splunk/react-ui)
Splunk Visualizations
(@splunk/visualizations)
Unify Dashboard Framework
(@splunk/dashboard-core)
Dashboard Studio Custom Time Inputs App <Insert New App here>
Splunk Built App Dev App Dev

19. © 2022 SPLUNK INC.
We’re All One Big Team

20. © 2022 SPLUNK INC.
Two Use Cases I’ll Cover:
1. Improving Your UI
2. Advanced Development
with SUIT

21. © 2021 SPLUNK INC.
© 2022 SPLUNK INC.
Improving Your UI

22. © 2022 SPLUNK INC.
Making your Splunk Apps look Sweet
DEV1204B - Making Your Splunk Apps look Sweet with SUIT
Before After

23. © 2022 SPLUNK INC.
Making your Splunk Apps look Sweet
DEV1204B - Making Your Splunk Apps look Sweet with SUIT

24. © 2021 SPLUNK INC.
© 2022 SPLUNK INC.
Advanced Development with SUIT

25. © 2022 SPLUNK INC.
Under the Hood of Dashboard Studio
1. Dashboard Studio provides a Dashboard Definition creation and editing experience.
2. Dashboard Definitions are stored in Splunk, accessible via the REST API.
3. When Viewing a dashboard, the definition is retrieved, and rendered via
@splunk/dashboard-core.

26. © 2022 SPLUNK INC.
Extending Dashboards
Developers can build apps that extend dashboards even further to meet advanced use
cases using @splunk/create and use of various Splunk docs.
Fetch Dashboard Definition
REST API Knowledge
Endpoint
Create Custom Preset
Dashboard Presets
Load with DashboardCore
Load Dashboard Definition Using
React and DashboardCore
Package App
Package App

27. © 2022 SPLUNK INC.
Custom Timer Visualization
App Context: Search

28. © 2022 SPLUNK INC.
Custom Timer Visualization
App Context: Custom Timer Vis App

29. © 2022 SPLUNK INC.
Custom Time Inputs
Another Example using SUIT: https://github.com/splunk/timelapse-vis

30. © 2022 SPLUNK INC.
Resources for Timelapse/Contributions
● Note: This is not an official Splunk supported app. This is an open-source project.
● Splunkbase Link for the App - https://splunkbase.splunk.com/app/6364/
● Github Repo for the App - https://github.com/splunk/timelapse-vis
Start developing with SUIT today

31. © 2022 SPLUNK INC.
© 2022 SPLUNK INC.
Extended
Resources
• Examples Gallery:
https://splunkui.splunk.com/Create/ExamplesGall
ery
• Community Slack: #appdev, #splunkui, #webplatform
• SplunkUI Docs: https://splunkui.splunk.com
• Splunk Answers: https://answers.splunk.com
• Email: designsystem@splunk.com
• Other Important Splunk UI Talks:
– DEV1619C
– DEV1204B
– DEV1595B
– DEV1134A
– DEV1564B

32. © 2021 SPLUNK INC.
© 2022 SPLUNK INC.
Q&A

33. © 2019 SPLUNK INC.
Driving Customer Success
Rinita Datta, Senior Manager, Customer Success, Splunk

34. © 2022 SPLUNK INC.
SF Bay Area
Splunk User Group
Self-service resources
Rinita Datta

35. © 2022 SPLUNK INC.
My Million
Data Points
Rinita Datta
Sr. Manager, Marketing
Electronics engineers turned ….
Full stack developer turned ….
MBA grad turned .. PMM @ Splunk

36. © 2022 SPLUNK INC.
How do I introduce and
onboard my colleague
to Splunk?
There are so many
resources! How do I get
started?
I wonder what else I can
do with Splunk.
What’s new with
Splunk?
How do I solve this
particular problem with
Splunk?
What are some best
practices to follow while
upgrading Splunk?
Do you relate with one or more of these questions?
Type the question no. in the chat!
1
2
3
4
5
6

37. © 2022 SPLUNK INC.
Explore the
Adoption Boards
3 key self-service resources to the rescue!
Sign up for Tech
Talks and
Newsletters
Find expert
guidance on Splunk
Lantern

38. © 2021 SPLUNK INC.
● Get the “what, why and when” on different Splunk
resources
● Binge the latest + most valuable product content
● Upcoming content on Dashboard Studios, industry
specific solutions, Splunkbase app recos etc.
Adoption Boards
There are so many
resources! How do I get
started?
How do I introduce and
onboard my colleague
to Splunk?
Start exploring the 3 Adoption Boards: Platform, Security
and Observability and share with your colleagues/friends.

39. © 2021 SPLUNK INC.
● “Tech Talks” is a series of 20-30 minute,
practitioner-focused webinars that highlight Splunk
solutions and ALWAYS include a hands-on demonstration
from a technical expert. View them live or on-demand.
Sign-up here to never miss a Tech Talk.
● Subscribe to our monthly newsletter to stay apprised of
product news and announcements, digital happenings and
events, and much more.
Subscribe to newsletters here to stay in the know.
Tech Talks and Newsletters
I wonder what else I can
do with Splunk.
What’s new with
Splunk?

40. © 2021 SPLUNK INC.
● “Lighting your way with clear and actionable guidance from
Splunk experts”
● Find new uses for the data you already have in Splunk or
want to bring in - with a library of use cases for Security or
Observability.
● Check out product tips for Platform, Security or Observability
to move beyond the basics and get Splunk-ing like a pro!
Bookmark and start exploring Splunk Lantern
How do I solve this
particular problem with
Splunk?
What are some best
practices to follow while
upgrading Splunk?
Splunk Lantern

41. © 2021 SPLUNK INC.
If you remember one
thing from these
slides ….
Visit the Adoption Boards:
experience.splunk.com/platform
…/security
…/observability
and find links to and context for
everything else!
Lantern: Use Cases and Best Practices
Tech Talks
Community
Newsletters
Free workshops
Best of .conf
Demo videos
Recommended trainings
Recommended Splunkbase apps
Adoption Boards
Getting Started Guides
and more!

42. © 2021 SPLUNK INC.
Any questions?
Also, feel free to reach out
to me at
rdatta@splunk.com!