Dashboard Digest Series – Episode 5: Maps!

splunk_maps“A map does not just chart, it unlocks and formulates meaning; it forms bridges between here and there, between disparate ideas that we did not know were previously connected.” ― Reif Larsen, The Selected Works of T.S. Spivet

Welcome to Episode 5 of the Dashboard Digest series!

Maps play a critical role in visualizing machine data in almost any industry for thousands of use cases.  We’ve been continuously adding more mapping functionality to Splunk and with the recent addition of Custom Visualizations in Splunk 6.4 you (the community) have too!  This is exciting news as I’ve noticed many times the first panel on a dashboard that draws attention is a map.  The best part is that each of these displays …

» Continue reading

Dashboard Digest Series – Episode 2

noaa_website

Welcome to the second episode of the Dashboard Digest Series! So what do we have for Episode 2? Waves!

The use case here was to display real-time and historical parameters and statistics from the National Oceanic and Atmospheric Administrations National Data Buoy Center or NOAA NDBC for short.  Thanks to an add-on created by Julien Ruaux on Splunkbase, I was able to easily collect data from the NDBC’s data feed and start creating dashboards right away.   While the NOAA NDBC site has it’s own dashboard (pictured right) I figured it might be useful to access and visualize the data in different ways through Splunk.  That and eventually correlate the buoy data with other data sources.

Purpose: Display meaningful statistics …

» Continue reading

Introducing the “Welcome Page Creator”

“Hey Ninja! My manager just got me access to this ‘Splunk’ thing and I was able to log in and all but all I see is this screen with a search bar. What the heck is this and where are all the answers? What do I do here?”

After way too many situations teaching newbies about Splunk, I finally took a step back and asked myself: What if when they logged in to Splunk, they were presented with all the materials needed to get Splunking? Not only would they get answers more rapidly, but I’d get a heck of a lot more work done with less distractions.

Attempting to solve this, I created dashboards that “Welcomed” users to the Splunk environment by providing …

» Continue reading

Dashboard Digest Series – Episode 1

Welcome to the Dashboard Digest Series! Starting today you can look forward to a different dashboard (and sometimes a collection of dashboards) that was created to solve one of many hundreds of use cases in just about any industry in hopes of getting your creative juices flowing and show you the art of possible of what you can create with Splunk.  Some upcoming examples you can expect in this series are depicted in the collage below.

dashboard_collage_luedtke_v1

Each post will contain information about the dashboard such as data sources involved, Splunk version, Apps used, and general purpose. This is a great way to see new features and learn about tips and tricks on how to create these dashboards!

So let’s get started!

The first …

» Continue reading

If your plants could speak to you, what would they say?

unhappy_plant

I’m pretty sure mine would say “Hey Bozo, thanks for drowning me to death” or “Must… have… water… What is this, the Sahara?” Oh, and also “I hate it here, what’s it take to get some morning sun?”

I decided it was time to apply my inner nerd to reduce my plants suffering. That and happier plants mean a happier fiancé. Enter Splunk! The goal was:

  1. Keep track of moisture level in the soil.
  2. Determine best location for light intake.
  3. Combine current weather data, future forecasts and 1 and 2 above to create some machine learning models that predict when is best to water. (I’m still working on this part)

I shall call it… Operational Plantelligence! When first said aloud, …

» Continue reading

Splunk and Cacti

Several options exist to bring SNMP into Splunk, with such examples as our SNMP Modular Input.  But what if you already have a SNMP collection built with Cacti?  You could consolidate, rebuild and reconfigure all the collection… but the easier option would be to take Cacti, and feed it into Splunk.  This is a great example of leveraging one tool to collect the data, but bringing all the information together into a single platform for analytics.…

» Continue reading

Oooooooh, Shiny… Icons!

Screen Shot 2015-06-25 at 1.16.53 PMWho doesn’t love building “shiny” dashboards and getting the following reaction from their  viewers? One trick to add some extra flare to your dashboards is replacing your single value rangemap icons with your own images that change color or to a different image depending on the value. This even includes animated .gif or svgs! For example the Operational Intelligence dashboard below shows one use case of single value icon replacements. In fact, the “Power” and “HVAC” icons on the bottom right are animated .gifs and both change color and spin faster according to the single value result. Cool eh? Let’s see how this is done so you can build your own!  Note: This only works on 6.1.x and 6.2.x!

Additionally …

» Continue reading

.conf2014 Highlight Series: Creating an Interactive Transaction Profiler

.conf2015 registration is now open!
We’ve also opened up the .conf2015 call for papers and speakers.

LGO-conf2015-RGB

In our ongoing series of .conf2014 #TBT highlights, we revisit Matthias Maier’s “Dashboard Fun” presentation focused on easily creating interactive dashboards with Splunk.

Skill Level:
Intermediate

Solution Area:
Application Development, Application Management

Splunk:
Splunk Enterprise

Presentation overview:
Using Simple XML and Splunk Enterprise, learn how to create easy interactive dashboards to explore data. This demo showcases great tools to put ion the hands of Splunk users, help desk users and IT Operations staff.

For the full recording, check out the Creating an Interactive Transaction Profiler audio.

Register for .conf2015 today and look for more of our #TBT .conf highlights as we …

» Continue reading

Splunk MINT – Enhance Operational Intelligence with Mobile Data

Splunk MINT logo[3]MINT Highlights

 

 

I’m thrilled to announce a major update to Splunk MINT. Splunk MINT allows you to collect and analyze operational information from your mobile apps. Now, you can get the same insight on mobile app performance, problem, and usage as you do with applications and infrastructure that you’re probably already using Splunk for today.

MINT Analytics 3-13Real Time Insight:
Track sessions, unique users, application crashes, crash rates per user, and user engagement in real time. Drill down on items to explore in more detail.

Network Monitoring:
Measure the volume, latency and status of all HTTP connections. This enables you to understand the network’s contribution to transaction response times or query response times from API calls and other web services.

Transaction

» Continue reading

Calendar Custom Visualization with Simple XML

While designing a recent application, I wanted to display how many unique users logged in per day on a monthly basis.  This is relatively trivial to do in the Splunk search language, but the visualization of that data usually ends up being a table.  I thought it would be more natural to display this information on a calendar, so I set out to get this working with the new Splunk 6 hotness.  Here is the result:

 

The Search

Like I said earlier, the search part of this pretty easy.  I am looking in the Windows Security Event Log, but you don’t have to.  Really, all we are trying to get to is a list of events that have a …

» Continue reading