Splunk
Introduction to Dashboards
- Level
- Intermediate
- Version
- 9.4
- Language
- EN
- Course code
- SP-ITD
Prerequisites
To be successful, students must have a solid understanding of these courses:
- Intro to Splunk
- Using Fields (SUF)
- Search Optimization (SSO)
Or the following legacy courses:
- Splunk Fundamentals 1&2 (Retired)
To be successful, students are recommended (but not required) to have a solid understanding of these courses:
- Intro to Knowledge Objects
- Visualizations
Contents
This four-and-a-half hour course teaches students how to create dashboards in Dashboard Studio. Students will learn the basics of the dashboard source code, dashboard layout types, how to select a data source, and improve dashboard performance.
Outline
Topic 1 – Create a Prototype
- Describe dashboard framework
- Compare layout types
- Add visualizations
- Manage views
Topic 2 – Selecting a Data Source
- Define the dataSources stanza
- Explain how mock data is used
- Create event annotations
Topic 3 – Improving Performance
- Identify performance improvement methods
- Use tstats and an accelerated data model
- Create base and chain searches
- Set dashboard defaults
