• Online, Self-Paced

Viewing individual log items can be useful when troubleshooting specific issues, but less so to see overall trends. When monitoring performance, it is helpful to be able to view service performance at a glance. In this course, you will learn how to create and configure charts to visualize data and provide meaningful drilldown capabilities. You'll also learn how to build customized dashboards to facilitate at-a-glance performance monitoring.

Learning Objectives

Visualization Overview and Chart Types

  • start the course
  • access the visualizations of Splunk events
  • create tables from a Splunk search
  • visualize data as bar and line charts in Splunk
  • display data as pie, scatter, and bubble charts
  • utilize the other chart types in Splunk

Drilldown Behavior and Chart Controls

  • work with visualization drilldown
  • configure visualization on additional chart types
  • define the dynamic drilldown behavior
  • specify the context-driven drilldown behavior
  • configure control features on visualizations

Building Dashboards in Splunk Web

  • access the dashboard editor in Splunk
  • create a Splunk dashboard
  • modify the existing dashboards in Splunk
  • generate PDF reports from Splunk dashboards

Building Dashboards with Simple XML

  • modify a dashboard by editing simple XML
  • implement searches in simple XML dashboards
  • save the base searches from which to build dashboard searches
  • configure the dynamic drilldowns in charts using simple XML
  • utilize the Splunk tokens in Dashboards using simple XML

Practice: Charting in Splunk

  • create charts from Splunk data

Framework Connections

Feedback

If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.