Dashboards are a powerful tool for communicating a lot of information at once. Many Splunk apps are packaged with dashboards to help you make the most of your data. For example, the Microsoft 365 App for Splunk comes with a number of dashboards to provide insights around usage, incidents, and more.
Here's the M365 Overview dashboard, built with Classic SimpleXML.
This dashboard provides a great overview of the Microsoft 365 suite of applications, but as you can see, the panel layouts are fairly rigid. This leads to wasted empty space under the OneDrive column chart, and around the various application icons. In general, the dashboard looks blocky and the colors are dull.
In the most recent version of the Microsoft 365 App for Splunk, version 3.3.0, you'll notice a handful of new dashboards built with Dashboard Studio. Dashboard Studio provides native support for pixel-perfect layouts, shapes and text boxes, images and more. Let's take a deeper look at how the refreshed Microsoft 365 dashboard takes advantage of all these Dashboard Studio capabilities.
Note how the Microsoft 365 dashboard groups and layers multiple donut charts and single values in the top right section "M365 Usage & Adoption". Not only are single values included inside the donut chart to represent usage percentages, but single values are also placed below the donut chart legends to show the actual count for each category.
This dashboard also heavily leverages shapes and text boxes to visually indicate which metrics and charts are closely related, or not. There are dark rectangles with rounded corners behind each of the charts, which help to provide contrast from the background as well as group relevant metrics together, such as the high level KPIs in the "Summary" box. Text boxes are used throughout the dashboard to provide labels, titles, and additional context.
Images can be used in a variety of ways to put some polish to your dashboard. Background images provide more interesting backgrounds than the standard light or dark theme. Even if they are just a subtle pattern or gradient, they make a huge difference! Images can also be used for logos and company branding, as you can see with the Splunk logo in the top right corner.
Below is another example of a new Studio dashboard, the Defender 365 Overview dashboard.
In this dashboard, you can see more examples of how grouping and overlaying visualizations together provides more context for the information displayed. For example, under "Incident Disposition Stats" on the left, you can see the larger single values represent the count of incidents by category, and the smaller single values represent the percentage. This helps the end user to more quickly gain an understanding of the current status.
Flexible layout options mean that more space can be allocated for visualizations that require it, like the bar graph in the bottom right.
If you want to level-up the dashboards in your app as well, here are a few things to keep in mind as you get started:
If you're new to Dashboard Studio, here are some resources to get you started:
The Splunk platform removes the barriers between data and action, empowering observability, IT and security teams to ensure their organizations are secure, resilient and innovative.
Founded in 2003, Splunk is a global company — with over 7,500 employees, Splunkers have received over 1,020 patents to date and availability in 21 regions around the world — and offers an open, extensible data platform that supports shared data across any environment so that all teams in an organization can get end-to-end visibility, with context, for every interaction and business process. Build a strong data foundation with Splunk.