Splunk: Drupal Access Dashboard Definition

<?xml version='1.0' encoding='utf-8'?>
<dashboard>
  <label>Drupal Access Statistics (Last Hour)</label>
  <row>
    <chart>
      <searchString>drupal-access | timechart count by src</searchString>
      <title>Hits by Host</title>
      <earliestTime>-60m@m</earliestTime>
      <latestTime>now</latestTime>
      <option name="charting.axisTitleX.text">Time</option>
      <option name="charting.chart">area</option>
      <option name="charting.chart.stackMode">stacked</option>
      <option name="charting.primaryAxisTitle.text"/>
    </chart>
    <chart>
      <searchString>drupal-access | timechart eval(min(peak_memory)/(1024*1024)) as "Min Memory", eval(avg(peak_memory)/(1024*1024)) as "Avg Memory", eval(max(peak_memory)/(1024*1024)) as "Max Memory"</searchString>
      <title>Memory Usage</title>
      <earliestTime>-60m@m</earliestTime>
      <latestTime>now</latestTime>
      <option name="charting.axisLabelsY.majorUnit"/>
      <option name="charting.axisTitleX.text">Time</option>
      <option name="charting.axisTitleY.text">Memory (MB)</option>
      <option name="charting.chart">line</option>
      <option name="charting.chart.nullValueMode">zero</option>
      <option name="charting.primaryAxisTitle.text"/>
      <option name="charting.secondaryAxisTitle.text"/>
    </chart>
    <chart>
      <searchString>drupal-access | timechart count by cache_status</searchString>
      <title>Page Cache Rate</title>
      <earliestTime>-60m@m</earliestTime>
      <latestTime>now</latestTime>
      <option name="charting.axisTitleX.text">Time</option>
      <option name="charting.axisTitleY.text">%</option>
      <option name="charting.chart">area</option>
      <option name="charting.chart.nullValueMode">zero</option>
      <option name="charting.chart.stackMode">stacked100</option>
      <option name="charting.primaryAxisTitle.text"/>
      <option name="charting.secondaryAxisTitle.text"/>
    </chart>
  </row>
  <row>
    <chart>
      <searchString>drupal-access | chart count as Hits by path | sort 10 -Hits</searchString>
      <title>Top Pages</title>
      <earliestTime>-60m@m</earliestTime>
      <latestTime>now</latestTime>
      <option name="charting.chart">bar</option>
    </chart>
    <chart>
      <searchString>drupal-access referrer!="*yourwebsite.com*" | chart count AS Hits by referer | sort 10 -Hits</searchString>
      <title>Top Referers</title>
      <earliestTime>-60m@m</earliestTime>
      <latestTime>now</latestTime>
      <option name="charting.chart">bar</option>
    </chart>
  </row>
  <row>
    <chart>
      <searchString>drupal-access | eval memory=peak_memory/(1024*1024) | chart avg(timer) over memory</searchString>
      <title>Response over Memory</title>
      <earliestTime>-h@m</earliestTime>
      <latestTime>now</latestTime>
      <option name="charting.axisTitleX.text">Memory (MB)</option>
      <option name="charting.axisTitleY.text">Timer (ms)</option>
      <option name="charting.axisY.scale">log</option>
      <option name="charting.chart">scatter</option>
      <option name="charting.primaryAxisTitle.text"/>
      <option name="charting.secondaryAxis.scale">log</option>
      <option name="charting.secondaryAxisTitle.text"/>
      <option name="count">10</option>
      <option name="displayRowNumbers">true</option>
    </chart>
    <chart>
      <searchString>drupal-access | eval userStatus=(if(uid=0, "Anonymous", "Authenticated")) | chart count by userStatus</searchString>
      <title>Authentication Status</title>
      <earliestTime>-h@m</earliestTime>
      <latestTime>now</latestTime>
      <option name="charting.chart">pie</option>
      <option name="count">10</option>
      <option name="displayRowNumbers">true</option>
    </chart>
    <table>
      <searchString>drupal-access | chart count AS Hits, eval(sum(timer)/1000) as SumTime by hostname | sort 10 -Hits</searchString>
      <title>Top Visitors By IP</title>
      <earliestTime>-60m@m</earliestTime>
      <latestTime>now</latestTime>
    </table>
  </row>
</dashboard>