This document discusses how to create and manage Splunk dashboards. It outlines the steps to select a visualization type, generate and configure visualizations using search queries, build and edit the dashboard layout, and share or modify the completed dashboard. It also provides references for common visualization types and examples of data structure requirements.

1. Splunk DashboardSplunk DashboardSplunk Dashboard

2. AgendaAgendaAgenda
Create dashboard
Visualization reference
Data structure requirements

3. Create dashboardCreate dashboardCreate dashboard
Select a visualization
Generate and configure visualizations
Build and edit dashboard
Share and manage dashboard
Edit XML

4. Select a visualizationSelect a visualizationSelect a visualization
Requirement
Related logs

5. Generate and configureGenerate and configureGenerate and configure
visualizationsvisualizationsvisualizations
New search
Output as a table, events list, charts & single value etc..
Generate visualization

6. TableTableTable

7. Event listEvent listEvent list

8. Single ValueSingle ValueSingle Value

9. Build and edit dashboardBuild and edit dashboardBuild and edit dashboard

10. Convert from searchConvert from searchConvert from search

11. Convert from searchConvert from searchConvert from search

12. Share and manage dashboardShare and manage dashboardShare and manage dashboard

13. Share and manage dashboardShare and manage dashboardShare and manage dashboard

14. Modify dashboardModify dashboardModify dashboard

15. Edit XMLEdit XMLEdit XML

16. Visualization referenceVisualization referenceVisualization reference
Events list
Table
Charts
Single value
Gauges
Maps

17. Visualization referenceVisualization referenceVisualization reference

18. Visualization referenceVisualization referenceVisualization reference

19. Data structure requirementsData structure requirementsData structure requirements
| stats count by action, host
| chart avg(bytes) over sourcetype
| stats count by action, host | table host count