Does anyone have a sample on how to create modules? I tried the one from the docs, but got no where.
I would appreciate if someone can show me one of their basic ones so I can grasp the concept and benefits of using modules vs dashboard.
The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Previous Topic: Detecting the absence of a forwarder | Next Topic: Merge two fields
Does anyone have a sample on how to create modules? I tried the one from the docs, but got no where.
I would appreciate if someone can show me one of their basic ones so I can grasp the concept and benefits of using modules vs dashboard.
Modules are components of dashboards. I suggest you start by examining the sample_app or reading the Developer Manual from the beginning.
I tried reading the manual, with no luck. Hence I am here to see if other people had better luck. The samples uses dashboard.html which I have no clue what that referes to. When I try to replicate the sample, but using my own data, it gives errors.
That is why I would like to see other people's example, besides what is mentioned in the documentation.
Oh, and I tried the following dashboard and it always fails. From the documentation I have no clue why this would fail? The below dashboard works great when adding charts etc, but not when using module names.
<dashboard>
<label>Response Times</label>
<module name="HiddenSavedSearch" autoRun="true">
<param name="savedSearch">Response Time for the past 30 days</param>
</dashboard>
You need to put at least one child module below hidden saved search to render the results of the search. You also need to put layout information in the module so that Splunk will know where to render the results.
You might want to review some additional dashboard examples:
http://www.splunk.com/base/Documentation/latest/Developer/DashboardExamples
All the Dashboards start with
<view template="dashboard.html">
What is that since I do not have it? do I need a template?
You can't mix simple XML and full XML. it's one or the other. HiddenSavedSearch and all other modules are only usable in full XML.