Add Buttercup Enterprises Operations Dashboard (Dashboard Studio)#5
Draft
dd-Splunk wants to merge 1 commit into
Draft
Add Buttercup Enterprises Operations Dashboard (Dashboard Studio)#5dd-Splunk wants to merge 1 commit into
dd-Splunk wants to merge 1 commit into
Conversation
Ship a Dashboard Studio view with five team panels (IT Ops, DevOps, Business Analytics, Security & Fraud) using canonical SPL from the S4R catalog. Default time range is the last hour with one-minute refresh. Also add platform field extraction for DevOps panels, nav entry, view ACL metadata, and an MCP validation script (make validate-s4r-dashboard). Co-authored-by: D. Dessy (Splunk) <ddessy@splunk.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a shipped Dashboard Studio view for the Buttercup Enterprises workshop (
SA-S4R), with five panels aligned to the S4R SPL catalog and the requested multi-team layout.Dashboard
SA-S4R/default/data/ui/views/buttercup_operations_dashboard.xml#791CF8(RGB 121, 28, 248)-1h,now) via global time pickerrefresh: 1m,refreshType: delay)Panels
timechart count by status limit=10top limit=20 platformstatus>=400 | timechart … useragentaction=purchase status>=400 | lookup … | timechart sum(product_price)iplocation clientip | geostats count by CitySupporting changes
props.conf:EXTRACT-platformso DevOps platform panel works without manual Lab 4 field extractiondefault.meta: View ACL limited toadmin,sc_admin,power, anduserroles (revenue/geo panels are on this restricted view)nav/default.xml: Nav link + indigo app chrome colorscripts/validate-s4r-dashboard-queries.sh: Runs all five panel queries via Splunk MCPsplunk_run_querymake validate-s4r-dashboard: Makefile wrapper for the validation scriptHow to verify (local Splunk)
Open Splunk Web → Splunk4Rookies app → Buttercup Enterprises — Operations Dashboard.
Notes
docs/S4R-SPL-CATALOG.md; validate live withmake validate-s4r-dashboardaftermake up.