This TA represents a collection of diverse Splunk visualizations packed all into one app. The advantage of this is the ease of installation and management of all visualizations through one TA. The Repository contains all Data in /opt/splunk/etc/apps/Splunk_TA_common-viz. The installed versions of the visualizations are listed below.
Install this TA on all Search Heads you want to use with more than the standard Visualizations.
Visualizations make it easier to analyze and interact with data during investigations or within dashboards and reports.
The right visual goes a long way to understanding the results of the analysis of your most complex data.
With rich visualization you can easily find the right diagram to make your results known across your organization—in the boardroom or in the war room.
Splunkbase contains a wide array of Splunk-built visuals, and a development framework that makes it simple for customers and partners to create new visuals and make them available to the community.
Take a deeper look to https://docs.splunk.com/Documentation/SplunkLight/7.3.6/References/Datavisualizationlibrary
Data-Indexes: All indexes, This is an addon for the Visualisations
Summary Indexes: all related tstats indexes
Application Owner: SwissTXT Security
Application Developper: Patrick Vanreck
Roles: Search Head's and Search Head Cluster.
AD Group Mappings: Defined by own Role Model
This app is for anyone who wants to display seVersional metrics on a small area of a dashboard.
This app provides a visualization that you can use in your own apps and dashboards.
To use it in your dashboards, simply install the app, and create a search that provides the values you want to display.
Some visualization are bound by the follwoing limits:
- Total results: 1000
Once you have installed the TA, you can delete all other additionally installed visualization Addons like timeline visualization.
Compare the List shown in chapter Active Visualization addons and remove all additional installed.
After uninstalling all old visualization addons, you may need to adapt the path of the visualization in the dashboards.
Otherwise Splunk cannot find the correct path where the Visualisation is installed.
In our case the path where the new app Splunk_TA_common-viz is installed.
Here an example what to migrate in case that you used the timeline visualization in the past.
Search From: timeline.timeline
...
....
<option name="timeline.timeline.axisTimeFormat">MINUTES</option>
<option name="timeline.timeline.colorMode">categorical</option>
<option name="timeline.timeline.maxColor">#dc4e41</option>
<option name="timeline.timeline.minColor">#53a051</option>
<option name="timeline.timeline.numOfBins">3</option>
<option name="timeline.timeline.tooltipTimeFormat">MINUTES</option>
<option name="timeline.timeline.useColors">1</option>
...
Migrate/Change To: Splunk_TA_common-viz.timeline
...
....
<option name="Splunk_TA_common-viz.timeline.axisTimeFormat">MINUTES</option>
<option name="Splunk_TA_common-viz.timeline.colorMode">categorical</option>
<option name="Splunk_TA_common-viz.timeline.maxColor">#dc4e41</option>
<option name="Splunk_TA_common-viz.timeline.minColor">#53a051</option>
<option name="Splunk_TA_common-viz.timeline.numOfBins">3</option>
<option name="Splunk_TA_common-viz.timeline.tooltipTimeFormat">MINUTES</option>
<option name="Splunk_TA_common-viz.timeline.useColors">1</option>
...
You'll need to restart your Splunk daemon after this change.
This TA contains a collection of Visualization addons for Splunk 8.0.x to 8.2.x Enterprise Versions.
The following List below shows which Visualization addons are integred and their Versionsion.
List of the Active Visualization addons within this release.
The following List below shows which Visualization addons are not more integrated within this Versionsion.
The following List explains in short how to use the visualisation addons within this release.
Please refeer to the TA after installing it to see how each visualization is working in detail.
The following List below shows which Visualization addons are not more integrated within this Version.
The most of them uses python 2.7 or are only compatible until Splunk 7.3.x
https://splunkbase.splunk.com/app/3674/
- --> Archived!! Do not use anymore !!
-Initial Versionsion
Support is not guaranteed and will be provided on a best effort basis.
Please use Github to open issues or feature requests:
- **https://github.com/Splunk-App-and-TA-development/Splunk_TA_common-viz/issues**
| Supported Splunk Versions | Unsupported or Deprecated |
|---|---|
| 8.2.x, 8.1.x, 8.0.x, 7.3.9, 7.3.6 | 7.3.5 and lower, 6.6.x, 6.5.x, 6.4, 6.3, 6.2, older |
This app is supported by Patrick Vanreck (SwissTXT). Contact us under: yoyonet-info@gmx.net.
Please find the license for this software here:
Splunk TA Common Visualization Collection LICENSE
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"),
to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
<div class="footer"> Copyright © 2017-2021 by Patrick Vanreck _(SwissTXT AG)_ </div>As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.