This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6
When you build a dashboard, decide how to display your panels on the page. Note that, after the chrome and search panels, dashboards use different layoutPanels than search views. So make sure you know whether you're using a dashboard or search template.
Dashboard chrome layout panels are ordered similarly to search views:
If you want to include searches in your dashboard, put search modules in the following panels:
Panels after this point are arranged in a coordinate system by setting the layoutPanel param on the parent module in a panel. The coordinate system specifies a row and a column for the panel, such as: layoutPanel=panel_rowX_colY. You can use any number of rows, but you will want to limit yourself to about 3 or 4 columns (2 is standard for displaying data).
For example, here are two parent modules of panels in the tutorial dashboard:
<module name="HiddenSearch" layoutPanel="panel_row1_col1" group="Messages per minute last hour" autoRun="True"> ... <module name="HiddenSearch" layoutPanel="panel_row1_col2" group="KBps indexed per hour last 2 hours" autoRun="True">
You can also set up a group of panels within a larger panel, which looks like this:
To set this up, specify one parent module. This example uses StaticContentSample to set a header for the entire group of panels. Each panel then has one parent module which specifies the layoutPanel with the addition of the grp tag for placement within the group.
<module name="StaticContentSample" layoutPanel="panel_row2_col1" group="All Indexed Data" autoRun="True">
<param name="text">This will show you all of the data you have loaded into index=main over all time.</param>
<module name="GenericHeader" layoutPanel="panel_row2_col1_grp1">
<param name="label">Sources</param>
...
<module name="GenericHeader" layoutPanel="panel_row2_col1_grp2">
<param name="label">Sourcetypes</param>
...
<module name="GenericHeader" layoutPanel="panel_row2_col1_grp3">
<param name="label">Hosts</param>