Advanced Dashboards and Visualizations

This two-day course is designed for power users who want to create fast and efficient views that include customized charts, drilldowns, advanced behaviors and visualizations. Major topics include using tokens, global searches, event handlers, dynamic drilldowns and simple XML extensions for JavaScript and CSS.

View schedule »

Download course description »

Upcoming Classes

Course Topics

  • Prototyping
  • Using Tokens
  • Improving Performance
  • Customizing Views
  • Using Event Handlers
  • Adding Simple XML Extensions

Course Prerequisites


  • Splunk Fundamentals 1
  • Splunk Fundamentals 2


  • Working knowledge of XML
  • Experience with CSS and JavaScript (recommended)

Class Format

Instructor-led lecture with labs. Delivered via virtual classroom or at your site.

Course Objectives

Lesson 1 - Creating a Prototype

  • Define simple syntax for views
  • Use best practices for creating views
  • Identify transforming commands
  • Troubleshoot a view

Lesson 2 - Using Forms

  • Explain how tokens work
  • Use tokens with form inputs
  • Define types of token filters
  • Create cascading inputs

Lesson 3 - Improving Performance

  • Improve dashboard performance
  • Use tstats with global searches
  • Accelerate data models

Lesson 4 - Customizing Dashboards

  • Customize chart colors
  • Set panel refresh and delay times
  • Disable search access features

Lesson 5 - Using Event Handlers

  • Identify types of event handlers
  • Describe event actions
  • Use conditional matching
  • Create an event handler

Lesson 6 - Adding Drilldowns

  • Define types of drilldowns
  • Identify predefined tokens
  • Create dynamic drilldowns
  • Create contextual drilldowns

Lesson 7 - Adding Advanced Visualizations & Behaviors

  • Use simple XML extensions
  • Define Splunk custom visualizations
  • Troubleshoot simple XML extensions