topic Re: How to improve my apps performance in Monitoring Splunk

How to improve my apps performance

jangid — Wed, 15 Aug 2012 20:56:42 GMT

in my form based dashboard panel I am filling a drop down

<fieldset autoRun="true">
        <input type="time" searchWhenChanged="true">
            <default>Last 12 Hours</default>
        </input>
        <input type="dropdown" token="JT_JOB">
            <label>Select Job</label>
            <populatingSearch fieldForValue="JT_JOB" fieldForLabel="JT_JOB">
                <![CDATA[eventtype=counters_jt | table JT_JOB | dedup JT_JOB | sort JT_JOB ]]>
            </populatingSearch>
        </input>
</fieldset>

above search will take too much time based on my time criteria.
e.g. for last 12 hrs it'll take 15 to 20 seconds

the problem is I have more then 10 panels like this and this is big a pitfall for performance.

Is there any way to store this result and load this when my panel activate or any other alternate?

Thanks

Re: How to improve my apps performance

Drainy — Wed, 15 Aug 2012 21:29:39 GMT

Yes, save the search string as a saved search and use populatingSavedSearch instead;

Then you only need to enter the searchname and it will load the last scheduled search results

Re: How to improve my apps performance

jangid — Wed, 15 Aug 2012 21:48:23 GMT

do you mean create a scheduled search and use here?

if yes then what about if I want to load this panel before schedule search, what about new field/value in search result?

Re: How to improve my apps performance

Drainy — Wed, 15 Aug 2012 21:51:42 GMT

if there aren't any results from a scheduled search then the search will run on first load and store the results. Otherwise just use the fields as you normally would.

Re: How to improve my apps performance

Drainy — Thu, 16 Aug 2012 06:57:33 GMT

By the way, if this or other answers help you out then don't forget to click on the tick to the left 🙂 It just helps others out when searching for similar problems in the future.