Homepage for Splunk by Discovered Intelligence Inc.
Homepage presents logged in users with a 'virtual cockpit' that provides a single-pane-of-glass view into their specific use of Splunk. It does this through the use of a central home page, tailored to the user, that provides insight into the indexes and sourcetypes they have access to, the search jobs they have run, the saved searches and dashboards they have created and the apps they have permission to access. Users are able to dynamically drill-down into more details, re-run searches and jobs, or immediately search specific data sources. All this is done leveraging a simple point-and-click driven approach.
The app is designed to be a useful utility, shared globally across Splunk applications that can leverage it as the default home page for their app.
The app provides the following benefits:
- Presents users with a virtual cockpit into Splunk, providing at-a-glance key information tailored to the logged in user
- Greatly aids in a users understanding of Splunk, the data sources they can access and their specific search activity
- The point-and-click driven approach simplifies the Splunk learning curve and allows users to search data without typing anything
- The use of drill-down allows for additional relevant information to be displayed
- REST driven approach provides extremely fast performance without the need to search indexed data
- Tested to work at scale with both environments consisting of 100s of Splunk users and smaller environments of a few users
- Can be centrally administered and deployed across many apps in a Splunk environment as the default home page for those apps
Homepage provides 4 dashboards consisting of a main Homepage dashboard and three supplementary drill down dashboards as follows:
- Homepage (homepage.xml) - the main homepage customized and tailored to the logged in user
- Sourcetype Field Listing (homepage_sourcetype_fields.xml) - linked to from Homepage to provide a listing of fields and values for a given sourcetype
- Saved Searches Listing (homepage_saved_searches_listing.xml) - linked to from Homepage to provide a listing of saved searches authored by the logged in user
- Adhoc Searches Listing (homepage_adhoc_searches_listing.xml) - linked to from Homepage to provide a listing of adhoc searches performed by the logged in user
The following steps will help you get the app set up.
1. Install the app from splunkbase.
2. Restart Splunk
Points to note:
- The app is purposely hidden, as the home dashboard is designed to be accessed via other apps, not the Homepage app itself
- The app is purposely set with global permissions, in order to ensure the Homepage dashboards are accessible from other apps
- The app will generate a lookup of sourcetypes and indexes upon a restart
The following steps can be followed to set the Homepage dashboard as the home page of any app.
1. Navigate to the Splunk App that you wish to have Homepage as the home page for.
2. Go to Settings --> User Interface --> Navigation Menus
3. Click to edit the "default" navigation of the app
4. Under the <nav> XML group, add the following line:
<view name="homepage" default="true" />
The following requirements exist for this app:
- Works with Splunk Enterprise version 6.4.x and higher
- Designed to be installed on a single SH or a SHC
- Tested to work with the default Splunk User and Power roles. Other custom roles that do not inherit these roles may need similar capabilities.
For support, please email support@discoverdintelligence.ca
App developed by Discovered Intelligence Inc.
www.DiscoveredIntelligence.ca
Homepage for Splunk version 1.0.1
Fixes:
- Updates for jQuery 3.5
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.