Dashboards & Visualizations

Any way to get dashboard charts to "crawl" rather than "refresh?"

mikeely
Path Finder

I've got this useful-looking area chart on a dashboard and used XML to cause it to refresh every thirty seconds. What I'd really prefer for it to do would be to build from right to left without the whole thing blanking while the report runs. Is this doable?

Tags (3)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

Seems to me that you'd want to change the chart to use a real-time search, rather than a historical search. Starting with 4.3 (and actually in 4.2.3+ if you want to change the default settings in limits.conf), you can have a real-time search backfill with historical data (e.g., if you start it up for a 1-hour window, it will fill in the past 1 hour, then start updating going forward.)

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

Seems to me that you'd want to change the chart to use a real-time search, rather than a historical search. Starting with 4.3 (and actually in 4.2.3+ if you want to change the default settings in limits.conf), you can have a real-time search backfill with historical data (e.g., if you start it up for a 1-hour window, it will fill in the past 1 hour, then start updating going forward.)

Get Updates on the Splunk Community!

Fall Into Learning with New Splunk Education Courses

Every month, Splunk Education releases new courses to help you branch out, strengthen your data science roots, ...

Super Optimize your Splunk Stats Searches: Unlocking the Power of tstats, TERM, and ...

By Martin Hettervik, Senior Consultant and Team Leader at Accelerate at Iver, Splunk MVPThe stats command is ...

How Splunk Observability Cloud Prevented a Major Payment Crisis in Minutes

Your bank's payment processing system is humming along during a busy afternoon, handling millions in hourly ...