Two major themes to expect from Dashboard Studio features this year are interactivity (think: tokens support) and expanded visualizations. We're kicking off this year with the following improvements in Splunk Cloud Platform 8.2.2201:
At .conf21, we introduced the ability to set tokens by clicking on visualizations. You can learn more about this in our blog Dashboard Studio: New Features Highlighted At .conf21.
Starting in Splunk Cloud Platform 8.2.2201, you will be able to set default values for these tokens and use them in "Link to Custom URL". Let's take a look at the role default token values play in dashboards.
Typically, tokens from visualization interactions don't have a value set until a user actually interacts with the visualization. In the example above, token1's value will be set as the sourcetype of the bar that is clicked. However, before a user interacts with the visualization, token1 doesn't have any value associated with it. If token1 is being used in another visualization, that visualization will be unable to render while waiting for token1 to have a value applied. It might look something like this:
When you specify a default value, it will apply that value to the token, until another value is set by user interactions. You can specify the default value in the Configuration panel. Visit our docs to learn more about setting tokens from visualization interactions.
Once you specify the default value, the dashboard will load with the default value applied. You can still update the token value by interacting with the visualization.
Two other notable tokens enhancements include the ability to use tokens from visualization interactions in custom URL drilldowns, and improved handling of multi-select token values so that you can use strings with spaces.
Link Graph is a brand new visualization available in Splunk Cloud Platform 8.2.2201. Link Graph is great for showing relationships between multiple fields. Visit our documentation to learn more about how to set up a Link Graph in Dashboard Studio.
Single Value Radial has also been updated for an modernized visual aesthetic and dynamic coloring, similar to Single Value and Single Value Icon. With this update, you can also specify a maximum value other than 100 (which is the default) in the source code using the option maxValue.
Updated Bubble and Scatter charts have been released as splunk.bubble and splunk.scatter. The new splunk.type visualizations are designed to provide more flexibility with regards to configurations and data binding, so we encourage you to update your visualizations. You can do so by simply selecting the updated visualization from the chart type selector in the Configuration panel.
Last but not least, the markdown component has two new options for specifying text and background color.
The Dashboard Studio Examples Hub is a great place to find different configuration options or get inspiration from a full dashboard example. As the number of examples included grows, we want to make sure it's still easy to navigate and find the relevant examples you're looking for. In Splunk Cloud Platform 8.2.2201, we've refreshed the Examples Hub home page for a smoother navigation through all our examples!
The Splunk dashboards team loves to see the dashboards you are building and hearing your feedback, especially when you're pushing Dashboard Studio to the limits! We've heard feedback about dashboards with 100+ objects to provide data-dense single pane of glass views. In response, you'll notice some performance improvements in this release that makes editing dashboards a snappier experience.
One final update to share is the new placement and behavior of the visualizations action menu. Previously, you had to click on the visualization to see the action menu on the right side. Now, when you want to edit a visualization panel or interact with it while viewing the dashboard, you'll see the actions menu appear below the visualization while hovering.
Check out Dashboard Studio and send in your feedback through Splunk Ideas, and you might see your feature request listed on a future blog's "coming soon" list! We are continuing to work on new capabilities, which are delivered incrementally with Splunk Cloud Platform and Splunk Enterprise releases.
* This information is subject to change at any time, at the sole discretion of Splunk Inc. and without notice. This roadmap information shall not be incorporated into any contract or other commitment. Splunk undertakes no obligation to either develop or deliver any product, features, or functionality described here.
The Splunk platform removes the barriers between data and action, empowering observability, IT and security teams to ensure their organizations are secure, resilient and innovative.
Founded in 2003, Splunk is a global company — with over 7,500 employees, Splunkers have received over 1,020 patents to date and availability in 21 regions around the world — and offers an open, extensible data platform that supports shared data across any environment so that all teams in an organization can get end-to-end visibility, with context, for every interaction and business process. Build a strong data foundation with Splunk.