Perhaps we would like to add a second panel to our dashboard. To do that, we can open the dashboard and click on Edit:
In version 7.0, clicking on Edit opens the Edit Dashboard page:
Splunk now gives us the following selections (where we will—for now—select Add Panel):
The following options are displayed:
Here, we have the ability to add a new panel to our dashboard from a variety of sources:
- New: Creates one from scratch
- New from Report: Creates a panel from an existing report
- Clone from Dashboard: Creates a panel from an existing dashboard
- Add Prebuilt Panel: As the name says, it adds a prebuilt panel to our dashboard
So, for our example, let's select New:
Again, various options are displayed. For illustrative purposes, let's select Pie Chart and fill in the New Pie Chart options (shown in the following screenshot). I simply plugged in the original time preset (Previous year), added a Content Title, and provided the same search string. The idea here is to present the same information as our initial dashboard panel but in a different format:
Next, click on the button labeled Add to Dashboard:
The preceding screenshot is what our new, two-panel dashboard looks like. To be sure, the pie chart isn't very interesting, so let's make a change. You'll notice four icons in the upper-right corner of the lower panel. If you click on one second icon from the left (which looks like a tiny pie chart), you'll see that you have the option of changing the visualization type, and that Splunk has looked at your data and made some recommendations.
You can try out the different choices; I selected an Area:
Note that, in version 7.0, the visualization selector is more type more sophisticated, as shown in the following screenshot:
