In this chapter, we showed you how to build a three-panel dashboard without writing a single Splunk search command. Pivots can be a powerful tool to expose Splunk to business users who are data savvy, but perhaps initially resist learning to write Splunk commands to extract value from data.
To enable Pivots, we showed you how to create a data model used by the Pivot editor to create analyses, reports, and dashboards. You walked through creating your data model objects based on a hierarchy. You saw how data models can consist of attributes from existing data fields, inherited from parent objects, or extracted using a regular expression.
Finally, you used the very intuitive Pivot editor and created three different visualizations: area chart, pie chart, and single value with trend sparkline. You used those to create and organize a three-panel dashboard.
In the next Chapter...
