Latest version: 1.0

Sideview Admin Tools

Use the new Sideview Editor to create and edit your own custom interactive views without having to read or write XML.   Next »
The License Monitor page will notice recent spikes and extrapolate out whether you're going to exceed your license today.   Next »
The Indexed data inspector gives you some unusual tools to analyze sizes in your indexed data.   Next »

Take the Next Step

App Details

Latest version: 1.0
Last updated: November 1st, 2017
First released: Feb 5th 2016

This app contains some useful User Interfaces that we’ve developed for Splunk Administrators.

The most important is the Sideview Editor, which is a general interface for creating, editing and debugging Sideview XML views.

After that possibly the most interesting and practical piece is the License Monitor which has two parts. The first part is a dashboard that charts your indexing so far today, and predicts based on recent indexing rates whether or not you’re going to blow your license today. By drilling down on the spikes in the chart you can see breakdowns by source/index/host. The second part is an alert that you can enable, that will let you know when you’re headed for a violation so you can go and make the changes you need to BEFORE the violation occurs.