So, you built an amazing dashboard in Splunk and nobody knows how to use it. Now what? The title and description help, but the forms aren’t documented well enough for them to be intuitive. The obvious solution would be text descriptions or tooltips on each form field, neither of which Splunk supports in their Simple XML dashboards. You could add HTML content to the forms, but that introduces its own issues, like more clutter.
How We Solved It
The result looks like this:
Once the required app was installed, configuring our tooltips took almost no time at all. If you don’t want to install the app, just grab the file from GitHub and put it into your own app under the appserver/static directory.
If you find that you need to document your dashboards further, never be afraid to embed HTML into fieldset and panel object tags. They can be incredibly helpful. If you want to reference images, you can even embed those within your html tags after uploading them to the appserver/static directory within your app and using the following HTML:
It’s important to call out that we don’t recommend keeping all of your custom content in your Search & Reporting app. Knowledge objects specific to data sources should be kept in technology add-ons (TAs), while other content specific to your organization, team, or use case (such as dashboards, reports, and alerts) should be contained within its own app. This makes the content easier to update, maintain, and back up, while also making it more portable if you want to stage the contents on a development instance of Splunk before pushing to production.
Where to Find It
We’ve published the tooltips code on GitHub, where you’re free to download and modify it as you wish. If this script helps you or you want to see more like it, feel free to subscribe, comment, or contact us via email.
Never miss an update! Get all of our news delivered right to your inbox.