https://community.splunk.com/t5/Dashboards-Visualizations/Dashboards-Common-subsearch-query/m-p/209259#M44939 <P>works great. </P> Mon, 13 Jun 2016 22:28:30 GMT pahilw 2016-06-13T22:28:30Z https://community.splunk.com/t5/Dashboards-Visualizations/Dashboards-Common-subsearch-query/m-p/209257#M44937 <P>Question on common subsearch query on dashboard - I have 6 panels on my dashboard and all the panels use same subsearch query to get list of hosts. Is there a way to execute this query only once and provide it as input to panels? List of hosts get updated every 5-10 minutes so they need to be dynamically retrieved.</P> Mon, 13 Jun 2016 18:23:27 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Dashboards-Common-subsearch-query/m-p/209257#M44937 pahilw 2016-06-13T18:23:27Z https://community.splunk.com/t5/Dashboards-Visualizations/Dashboards-Common-subsearch-query/m-p/209258#M44938 <P>You're probably looking for post-process searches: <A href="http://docs.splunk.com/Documentation/Splunk/6.4.1/Viz/Savedsearches#Post-process_searches">http://docs.splunk.com/Documentation/Splunk/6.4.1/Viz/Savedsearches#Post-process_searches</A></P> <P>A base search runs once, returns a datacube-style preliminary result, post-processing searches turn the datacube into what each panel actually needs.</P> Mon, 13 Jun 2016 18:31:36 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Dashboards-Common-subsearch-query/m-p/209258#M44938 martin_mueller 2016-06-13T18:31:36Z https://community.splunk.com/t5/Dashboards-Visualizations/Dashboards-Common-subsearch-query/m-p/209259#M44939 <P>works great. </P> Mon, 13 Jun 2016 22:28:30 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Dashboards-Common-subsearch-query/m-p/209259#M44939 pahilw 2016-06-13T22:28:30Z