Skip to main content

Edit Dashboard

Dashboard editor​

To switch to the dashboard editor you need to:

  1. Go to the page of the dashboard you want to edit
  2. Click the Edit button
  3. Select the desired editing mode from the top of the interface Visual or JSON.
  4. Click the Save button to apply the changes or the Cancel button to cancel the changes.

Editor

Change the layout of the dashboard panels​

To change the layout of the dashboard panels, you need to:

  1. Go to the editing mode
  2. Click the drag and drop icon of the panel with the mouse pointer
  3. Move the panel to a new position
  4. Click on the Save button to apply the changes or the Cancel button to cancel the changes.

The process is clearly demonstrated in the animation below:

Panels Layout

Change panels query​

The query for each panel can be customized. Each panel has a built-in search with syntax highlighting.

To modify a panel's search query, you must:

  1. Go to edit mode

Edit icons are displayed in the upper right corner of each panel. The first edit icon represents the panel search.

Edit search button

  1. Go to the search editor by clicking the search icon.
  2. Change the query in the editor.

Edit search modal

  1. Click the Save button to apply the changes or the Cancel button to cancel the changes.

Change the dashboard source code​

It is also possible to edit the dashboard using the JSON source code editor. To do this:

  1. Go to edit mode
  2. Select the JSON editing mode at the top of the interface.

JSON Editor

  1. Make the necessary changes in the editor.

    • Change the location of panels by moving JSON-objects rows.panels inside the rows list.
    {
    "label": "Windows Events: Oveview",
    "inputs": [],
    "rows": [
        {
        "panels": [
            {
            "inputs": [],
            "height": 200,
            "label": "Event Code Chart",
            "type": "sm",
            "viz": {
    • The panel query is modified by specifying a new query in the sme.query field or editing an existing query.
    "sme": {
       "query": "source windows_events\r\n| aggs composite=true count(event.category) as category_count by event.code"
    }

  2. Click the Save button to apply the changes or the Cancel button to cancel the changes.