Skip to main content

Splunk Training + Certification

Creating Dashboards with Splunk

Course Description

This 9-hour course is designed for Power Users who want to create fast and efficient views that include customized charts, drilldowns, advanced behaviors and visualizations. Major topics include using tokens, global searches, event handlers, dynamic drilldowns and simple XML extensions for JavaScript and CSS.

As of Oct. 25, 2021, Splunk Education has replaced this course with the new Single-Subject Courses. Please refer to this page for more information on the new offerings. This course will continue to be offered by our Authorized Learning Partners (ALPs) only until approximately April 30, 2022. 

Instructor-led Training Schedule


Registration for this course is no longer available.

Course Prerequisites

  • Splunk Fundamentals 1
  • Splunk Fundamentals 2
  • Working knowledge of XML
  • Experience with HTML, CSS, and JavaScript

Course Topics

  • Simple XML
  • Tokens
  • Global Searches
  • Dynamic Drilldowns
  • Event Handlers
  • Simple XML Extensions

Course Objectives

Module 1 – Creating a Prototype
  • Define simple syntax for views
  • Use best practices for creating views
  • Identify transforming commands
  • Troubleshoot views
Module 2 – Using Forms
  • Explain how tokens work
  • Use tokens with form inputs 
  • Define types of token filters
  • Create cascading inputs
Module 3 – Improving Performance
  • Identify ways to improve dashboard performance
  • Use the tstats command
  • Use global searches
  • Accelerate data models
Module 4 – Customizing Dashboards
  • Customize chart and panel properties
  • Set panel refresh and delay times
  • Disable search access features
  • Define event annotations
Module 5 – Using Drilldowns
  • Define types of drilldowns
  • Identify predefined tokens
  • Create dynamic drilldowns
Module 6 – Adding Advanced Visualizations & Behaviors
  • Identify types of event handlers
  • Describe event actions
  • Create contextual drilldowns
  • Use simple XML extensions
  • Define Splunk custom visualizations