<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How does a post-process search work in Splunk? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-does-a-post-process-search-work-in-Splunk/m-p/262692#M16564</link>
    <description>&lt;P&gt;How do post-process searches work in Splunk? &lt;/P&gt;

&lt;P&gt;In my dashboard there are 4 panels. Around 3-4 sub searches are repeating in every panel which resulting performance issue and dashboard not displaying any data.&lt;/P&gt;

&lt;P&gt;Using Post-process searches will be helpful in my scenario. Or else please suggest other alternatives.&lt;/P&gt;</description>
    <pubDate>Mon, 05 Dec 2016 10:57:21 GMT</pubDate>
    <dc:creator>sainadh1247</dc:creator>
    <dc:date>2016-12-05T10:57:21Z</dc:date>
    <item>
      <title>How does a post-process search work in Splunk?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-does-a-post-process-search-work-in-Splunk/m-p/262692#M16564</link>
      <description>&lt;P&gt;How do post-process searches work in Splunk? &lt;/P&gt;

&lt;P&gt;In my dashboard there are 4 panels. Around 3-4 sub searches are repeating in every panel which resulting performance issue and dashboard not displaying any data.&lt;/P&gt;

&lt;P&gt;Using Post-process searches will be helpful in my scenario. Or else please suggest other alternatives.&lt;/P&gt;</description>
      <pubDate>Mon, 05 Dec 2016 10:57:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-does-a-post-process-search-work-in-Splunk/m-p/262692#M16564</guid>
      <dc:creator>sainadh1247</dc:creator>
      <dc:date>2016-12-05T10:57:21Z</dc:date>
    </item>
    <item>
      <title>Re: How does a post-process search work in Splunk?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-does-a-post-process-search-work-in-Splunk/m-p/262693#M16565</link>
      <description>&lt;P&gt;Without looking at your dashboard and the queries, it is hard to tell. If done right, post process could significantly help dashboard performance. However, there are some limitation you have to be aware of when you design your dashboard. &lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/Savedsearches#Post-process_searches"&gt;http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/Savedsearches#Post-process_searches&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 05 Dec 2016 14:23:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-does-a-post-process-search-work-in-Splunk/m-p/262693#M16565</guid>
      <dc:creator>sundareshr</dc:creator>
      <dc:date>2016-12-05T14:23:01Z</dc:date>
    </item>
    <item>
      <title>Re: How does a post-process search work in Splunk?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-does-a-post-process-search-work-in-Splunk/m-p/262694#M16566</link>
      <description>&lt;P&gt;a post process is used as the base search, not as the subsearch. You might benefit more from creating a summary index or a data model to try to accelerate performance.&lt;/P&gt;</description>
      <pubDate>Mon, 05 Dec 2016 16:07:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-does-a-post-process-search-work-in-Splunk/m-p/262694#M16566</guid>
      <dc:creator>cmerriman</dc:creator>
      <dc:date>2016-12-05T16:07:35Z</dc:date>
    </item>
  </channel>
</rss>

