<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Searchid for a dashboard in Knowledge Management</title>
    <link>https://community.splunk.com/t5/Knowledge-Management/Searchid-for-a-dashboard/m-p/573688#M8566</link>
    <description>&lt;P&gt;Hello&lt;/P&gt;&lt;P&gt;Can I get the searchid for the search that is triggered by a dashboard?&lt;/P&gt;&lt;P&gt;What is the syntax to use this searchid to create an alert?&lt;/P&gt;&lt;P&gt;Will this searchid trigger the search of the same dashboard even if the underlying search code of the dashboard changes?&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;</description>
    <pubDate>Thu, 04 Nov 2021 20:52:07 GMT</pubDate>
    <dc:creator>SplnkUse</dc:creator>
    <dc:date>2021-11-04T20:52:07Z</dc:date>
    <item>
      <title>Searchid for a dashboard</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Searchid-for-a-dashboard/m-p/573688#M8566</link>
      <description>&lt;P&gt;Hello&lt;/P&gt;&lt;P&gt;Can I get the searchid for the search that is triggered by a dashboard?&lt;/P&gt;&lt;P&gt;What is the syntax to use this searchid to create an alert?&lt;/P&gt;&lt;P&gt;Will this searchid trigger the search of the same dashboard even if the underlying search code of the dashboard changes?&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Thu, 04 Nov 2021 20:52:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Searchid-for-a-dashboard/m-p/573688#M8566</guid>
      <dc:creator>SplnkUse</dc:creator>
      <dc:date>2021-11-04T20:52:07Z</dc:date>
    </item>
    <item>
      <title>Re: Searchid for a dashboard</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Searchid-for-a-dashboard/m-p/573697#M8568</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;you can try this, when you are running dashboard&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| rest /services/search/jobs 
| cluster field=provenance showcount=t
| search dispatchState="RUNNING" AND provenance="UI:Dashboard:&amp;lt;Your dashboard name/label&amp;gt;"
| table cluster_count id dispatchState provenance&lt;/LI-CODE&gt;&lt;P&gt;r. Ismo&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 04 Nov 2021 21:21:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Searchid-for-a-dashboard/m-p/573697#M8568</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2021-11-04T21:21:10Z</dc:date>
    </item>
  </channel>
</rss>

