1. Create the Music Dashboard Tutorial app

In this first step of this tutorial, we'll create an app for the tutorial and add some sample data to it.

    Note  You need access to source files on your Splunk instance, so you might need to contact your Splunk administrator for permission and access.

Create the tutorial app:

  1. On the Splunk Web home page, click the Gears icon next to Apps.
  2. Click Create app.
  3. On the Add new page, fill out the properties of the new app:
    • For Name, enter "Music Dashboard Tutorial".
    • For Folder name, enter "musicdashboardtutorial".
    • Under Template, select "barebones".
  4. Click Save.
  5. A musicdashboardtutorial directory is created in $SPLUNK_HOME/etc/apps/ with auto-generated project files.

Now, let's get some sample music data for our music dashboard app. We'll use a static lookup table in CSV format.

  1. Create a /lookups folder under $SPLUNK_HOME/etc/apps/musicdashboardtutorial.
  2. Download the musicdata.csv file (located here) and save it to the $SPLUNK_HOME/etc/apps/musicdashboardtutorial/lookups folder.
  3. Changes to app source files that are made using tools other than Splunk's built-in editors typically require you to restart Splunk Web to see your changes, which you can do by opening http://<localhost:port>/debug/refresh in your web browser and clicking Refresh. But because we added a new directory and new files, you need to restart Splunk Enterprise.

  4. Restart Splunk Enterprise. When you reopen Splunk Web, you'll see your new app listed with the others apps―click your app to run it.

Next, we'll create a dashboard and add some Splunk visualizations to it. Continue to 2. Build a basic dashboard.