Skip to main content
Splunk Lantern

Introduction to creating custom visualizations in Splunk InfraMon

To help maximize the value of your data, the friendly Splunk Customer Success team created this quick reference list that highlights how customers can begin taking advantage of the power of visualizations in Splunk Infrastructure Monitoring. 

  • Leverage built-in content. Built-in content provides you with immediate visibility and value right out of the box. All you need to do is send your data in.
    • The Infrastructure Navigator (found in Navigation menu > Infrastructure) provides a high-level overview of the related infrastructure entities: Public Clouds, Containers, and My Data Center. From there, you are able to drill down into each entity’s specific dashboard to aide in your deeper investigation. All of this is provided right out of the box. Use these to aide in your troubleshooting workflows as well as to get inspiration for more custom visualizations.
    • Built-In dashboard groups (found in Navigation menu > Dashboards) are applicable to a wide variety of technologies and services. These dashboards give you immediate visibility into the technologies and services being used in your environment. Built-in dashboards, and the charts they contain, are read-only. They are automatically created in your organization if you deploy any of the integrations listed on the Data Setup page. When trying to modify a built-in dashboard, first copy and save it as a new dashboard, then you will be able to modify the copy.
  • Create custom charts and dashboards. 
    • Charts enable you to visualize the metrics you are sending in to Splunk Infrastructure Monitoring. A metric is anything that is measurable (you can assign a numerical value to it) and variable (changes over time). Charts can range from extremely simple (monitor a single metric for a single host in real time) to very sophisticated (apply advanced analytic formulas across several dimensions, compare values for different time periods, configure advanced display settings, and more). You can find a chart terminology quick reference here. Consider the following when creating a chart.
      • What metrics do you want to track? 
      • How might you want to customize some default settings? 
      • How you can create this chart -- is there an existing template you can work from, or copy an already existing chart and then modify, or create from scratch?
    • Dashboards are logically grouped collections of charts. Well-designed dashboards can provide useful and actionable insight into your system at a glance. There are three kinds:
      • Built-in dashboards. We’ve touched on these already. These cannot be modified and automatically populate with data once data is flowing in.
      • Custom dashboards. Tailored/custom dashboards grouped together logically or for a specific purpose. Remember that dashboards are meant to provide you insight at a glance so keep this in mind when creating dashboards and organizing them into groups.
      • User dashboards. These are dashboard groups organized each user account in your instance. Their created dashboards will be found in their specific user dashboard group.