Topics

| pdf version

Search views

This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10

Search views

Every page in Splunk Web is a view. For more basic information about how views work, read this page. Search views are pages like the flash timeline. Construct a new search view by following these instructions:

This is a general outline of the basic concepts for configuring views. To learn more about how to configure a search view, read Begin a Search View. To make a dashboard, see the page on Configure dashboards.

To configure a search view for your app, follow these steps:

  1. Decide which modules you want to include in your view. You will probably mostly use the search modules.
  2. Configure each module in <view_name>.xml.
  3. Put <view_name>.xml in the views directory, inside your app directory: $SPLUNK_HOME/etc/apps/<app_name>/data/ui/views/
  4. If you have more than one view for your app, arrange them in the UI by following the instructions in Create view collections.
Revision: 207 Contact Privacy Policy Terms of Use Community content licensed under Creative Commons