https://community.splunk.com/t5/Dashboards-Visualizations/Populate-2-panels-from-one-search-Dashboard/m-p/496450#M32509 <P>I have a search that pulls back a list of values and tables them for the details, what I would like to do is use that same search (so I don't have to run it twice since the base data is the same) and instead distinct count it so that I can have a count of what has came back for quick reference.</P> <P>I.e. If I'm expecting 15 values, but only 10 have came back, then I can proceed from there. Or if I'm expecting 15 and 15 have came back I can stop the search since everything I was looking for has came back even though the time frame may be too wide.</P> <P>How could I accomplish this in a dashboard?</P> Mon, 08 Jun 2020 00:18:06 GMT trever 2020-06-08T00:18:06Z https://community.splunk.com/t5/Dashboards-Visualizations/Populate-2-panels-from-one-search-Dashboard/m-p/496450#M32509 <P>I have a search that pulls back a list of values and tables them for the details, what I would like to do is use that same search (so I don't have to run it twice since the base data is the same) and instead distinct count it so that I can have a count of what has came back for quick reference.</P> <P>I.e. If I'm expecting 15 values, but only 10 have came back, then I can proceed from there. Or if I'm expecting 15 and 15 have came back I can stop the search since everything I was looking for has came back even though the time frame may be too wide.</P> <P>How could I accomplish this in a dashboard?</P> Mon, 08 Jun 2020 00:18:06 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Populate-2-panels-from-one-search-Dashboard/m-p/496450#M32509 trever 2020-06-08T00:18:06Z https://community.splunk.com/t5/Dashboards-Visualizations/Populate-2-panels-from-one-search-Dashboard/m-p/496451#M32510 <P>Yes, you can use one search in two (or more) dashboard panels. It's called "post-processing". First, you declare a base search, which collects events and (usually) transforms the data. Then each panel processes the results of the base search and displays it. See <A href="https://docs.splunk.com/Documentation/Splunk/8.0.3/Viz/Savedsearches#Post-process_searches_2">https://docs.splunk.com/Documentation/Splunk/8.0.3/Viz/Savedsearches#Post-process_searches_2</A> for more information.</P> Tue, 12 May 2020 21:11:45 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Populate-2-panels-from-one-search-Dashboard/m-p/496451#M32510 richgalloway 2020-05-12T21:11:45Z