Advanced Dashboards and Visualizations

This nine-hour course is designed for power users who want to create complex dashboards, forms, and visualizations. Its emphasis is on editing simple XML to create dashboards that use tokens, post-process searches, dynamic drilldowns, and custom stylesheets. Students also use custom JavaScript to add advanced visualizations and behaviors to dashboards.

View schedule »

Download course description »

Upcoming Classes

Course Topics

  • Prototyping
  • Using Tokens
  • Improving Performance
  • Customizing Views
  • Using Event Handlers
  • Adding Simple XML Extensions

Course Prerequisites


  • Using Splunk
  • Searching and Reporting with Splunk
  • Creating Splunk Knowledge Objects

Strongly Recommended

  • Advanced Searching & Reporting

Class Format

Instructor-led lecture with labs. Delivered via virtual classroom or at your site.

Course Objectives

Module 1 - Creating a Prototype

  • Define the simple XML syntax
  • Use best practices for creating views
  • Identify primary transforming commands
  • Troubleshoot a view

Module 2 - Using Tokens

  • Explain how tokens work
  • Define types of token filters
  • Use tokens with form inputs
  • Create cascading inputs

Module 3 - Improving Performance

  • Identify methods to improve performance
  • Improve search efficiency
  • Accelerate searches
  • Use tstats with global searches

Module 4 - Customizing Dashboards

  • Customize chart colors
  • Set panel refresh and delay times
  • Disable search features

Module 5 - Using Event Handlers

  • Identify types of event handlers
  • Name event actions
  • Use conditional matching
  • Create dynamic drilldowns

Module 6 - Adding Advanced Visualizations & Behaviors

  • Use simple XML extensions
  • Identify types of search managers
  • Define Splunk custom visualizations
  • Troubleshoot simple XML extensions