topic Scheduled search in a dashboard in Splunk Search

Scheduled search in a dashboard

bagarwal — Mon, 26 Mar 2018 05:39:53 GMT

Hello Everyone,

I have created a dashboard and wants the result for last 7 days; and want to schedule it and run every day , say at 9:30 pm . So, next morning when I open the dashboard it gives me the result immediately. I didn't find any option . For the report I know there are options. Is it something , we need to add cron schedule in xml file of the dashboard .

Kindly help.

Thanks in advance.

Best Regards,

Binay Agarwal

Re: Scheduled search in a dashboard

mayurr98 — Mon, 26 Mar 2018 06:20:33 GMT

Hello @bagarwal

Dashboard panels don't really cache information. They run each panels search at the time of the dashboard loading. However, you can schedule a report and import the results of the scheduled report into a dashboard panel. For instance, if you scheduled a report to run once a day at 00:00 then the dashboard would show the results of the scheduled report.

let me know if this helps!

Re: Scheduled search in a dashboard

bagarwal — Mon, 26 Mar 2018 10:50:36 GMT

Thanks @mayurr98 for the help.

Re: Scheduled search in a dashboard

reynlds — Tue, 02 Apr 2019 20:39:53 GMT

Is it possible to use the report through the dashboard as a "search base"? I'd like to have a couple of input fields that query the report as part of the dashboard, including a date picker. My users don't have access to my index, but I could allow access to the report.