Simple XML Dashboards - Implementing Splunk: Big Data Reporting and Development for Operational Intelligence - page 89

That's pretty simple. To convert this dashboard into a form, we have to do the
following things:

1. Searches need to be defined directly in the XML so that we can insert
variables into the searches. We can use the editor itself to change the
XML for us. Choose Edit search from the Edit menu on our table panel.

2. Then, click on Edit as an inline search followed by Save . This will convert

the XML defining the query for us. The changes are highlighted.
<?xml version='1.0' encoding='utf-8'?>
<dashboard>
<label>Chapter 4 Form 1</label>
<row>
<table>
<searchString>
sourcetype="impl_splunk_gen" error user="mary"
| stats count by logger
</searchString>
<title>Dashboard - Chapter 4 Form 1 - error</title>
<earliestTime>-60m@m</earliestTime>
<latestTime>now</latestTime>
</table>
</row>
</dashboard>

3. Change <dashboard> to <form> . Don't forget the closing tag.

<form>
<label>Chapter 4 Form 1</label>
...
</row>
</form>