Course Overview
This six-hour course is designed for Splunk power users who want to create advanced, interactive dashboards using the classic, simple XML framework. The course focuses on tokens, user inputs, dynamic drilldowns, and event handlers. It combines a strong technical focus with the opportunity to practice in a realistic lab environment.
Prerequisites
To be successful, students should have a solid understanding of these single subject courses:
- What is Splunk? (Retired)
- Introduction to Dashboards (ITD)
- Using Fields (SUF)
- Visualizations (SVZ)
Or the following legacy courses: Splunk Fundamentals 1&2.
Course Objectives
- Using Tokens
- Adding User inputs
- Improving Performance
- Customizing Dashboards
- Creating Dynamic Drilldowns
- Adding Event Handlers
Outline: Creating Classic Dashboards (CCD)
Topic 1 – Classic Dashboards
- Compare dashboards and forms
- Create prebuilt panels
- Troubleshoot views
Topic 2 – Using Tokens
- Describe how tokens work
- Define token syntax
- Use token filters
Topic 3 – Adding User Inputs
- Define user inputs
- Add a user input
- Create cascading inputs
Topic 4 – Improving Performance
- Identify performance improvement methods
- Use tstats and data model acceleration
- Create a base & chain search
Topic 5 – Customizing Views
- Customize charts
- Use event annotations
- Customize panels
Topic 6 – Create Dynamic Drilldowns
- Identify types of drilldowns
- Use the drilldown editor
- Create a dynamic drilldown
Topic 7 – Adding Event Handlers
- Name event handler types
- Define event actions
- Create a contextual drilldown