Simple XML Dashboards - Implementing Splunk: Big Data Reporting and Development for Operational Intelligence - page 99

sourcetype="impl_splunk_gen" loglevel=error user="$user$"
| table _time _raw network req_time logger
</searchTemplate>
<fieldset>
<input type="text" token="user">
<label>User</label>
</input>
<input type="time" />
</fieldset>
<row>
<chart>
<searchPostProcess>
timechart count as "Error count" by network
</searchPostProcess>
<title>Dashboard - Errors - errors by network timechart</title>
<option name="charting.chart">line</option>
</chart>
</row>
<row>
<chart>
<searchPostProcess>
bucket bins=10 req_time | stats count by req_time
</searchPostProcess>
<title>Error count by req_times</title>
<option name="charting.chart">pie</option>
</chart>
<chart>
<searchPostProcess>
stats count by logger
</searchPostProcess>
<title>Errors by logger</title>
<option name="charting.chart">pie</option>
</chart>
</row>
<row>
<event>
<!-- remove searchString and use the events from searchTemplate
-->
<title>Error events</title>
<option name="count">10</option>