Splunk: Convert a Simple XML Dashboard to Advanced XML
Problem: I have a simple XML dashboard that I want to convert to advanced XML, but there aren’t any buttons to do so.
Solution: The solution is easy, albeit not quite straight forward.
- First open the dashboard you’ve created in a browser (go to its url).
- Append “?showsource=true” to the end of the URL (leave out the quotation marks).
- Scroll to the bottom of the resulting page and copy the XML found there.
- Create a new view and paste that XML there.
- Check to ensure that both the new view and old view look and function the same.