I am using splunk 9.3.2. I have visualisation panels added my dashboard with multiple queries.
I use a base search with global time picker default value to 48 hours and subsequently use the chain searches.
I need my entire dashboard to refresh after every 5 mins. I tried "refresh":300 but it doesn't work. Not sure what am I missing here.
{
"visualizations": {
},
"dataSources": {
},
"defaults": {
},
"inputs": {
},
"layout": {
"type": "absolute",
"options": {
"height": 2500,
"backgroundColor": "#000000",
"display": "fit-to-width",
"width": 1550
},
},
"description": "",
"title": "My Dashboard",
"refresh": 300
}
You can set a default refresh time which will apply automatically to all data sources (unless a specific datasource is overwritten, edit the source of your dashboard and find the "defaults" section, under defaults->dataSources->ds.search->options create a new "refresh" key with a value containing your intended refresh interval, such as this:
{
"title": "testing",
"description": "",
"inputs": {},
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"earliest": "-24h@h",
"latest": "now"
},
"refresh": "60s"
}
}
}
},
"visualizations": {
...
...
}
}
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing
I added "refresh": "5m", "refreshType": "delay" to my base search and it works for all the chain searches
I have a base search and multiple chain search. can u add refresh only to base search ?
Will that refresh other panels ?
You can set a default refresh time which will apply automatically to all data sources (unless a specific datasource is overwritten, edit the source of your dashboard and find the "defaults" section, under defaults->dataSources->ds.search->options create a new "refresh" key with a value containing your intended refresh interval, such as this:
{
"title": "testing",
"description": "",
"inputs": {},
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"earliest": "-24h@h",
"latest": "now"
},
"refresh": "60s"
}
}
}
},
"visualizations": {
...
...
}
}
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing
Unfortunately i dont think dashboard studio can set auto refresh for entire dashboard in a single config, auto-refresh is set per data source. You must define the refresh interval for each relevant data source in the dataSources section of your dashboard JSON
Eg:
"dataSources": {
"myDataSource": {
"type": "ds.search",
"options": {
"query": "your search here",
"queryParameters": {
"earliest": "-48h@h",
"latest": "@h"
},
"refresh": "5m",
"refreshType": "delay"
}
}
}
#https://docs.splunk.com/Documentation/Splunk/9.4.2/DashStudio/dsOpt
Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a kudos/Karma. Thanks!
Hi @tgulgund
For the benefit of others who find this answer, this is slightly incorrect. It *is* possible for a single setting for all your datasources, If you want to refresh all datasources on a dashboard studio dashboard then update the defaults as per my previous message.
@livehybrid wrote:You can set a default refresh time which will apply automatically to all data sources (unless a specific datasource is overwritten, edit the source of your dashboard and find the "defaults" section, under defaults->dataSources->ds.search->options create a new "refresh" key with a value containing your intended refresh interval, such as this:
{
"title": "testing",
"description": "",
"inputs": {},
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"earliest": "-24h@h",
"latest": "now"
},
"refresh": "60s"
}
}
}
},
"visualizations": {
...
...
}
}
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing