Dashboards & Visualizations

Can search results be reused in multiple secondary join searches?

DrColombes
New Member

Can the results of a primary search be reused (without recomputing the primary search) in multiple joins with different secondary searches that go to separate panels in a dashboard?

Something like

| join [] in dashboard panel 2,
| join [] in dashboard panel 3,
| join [] in dashboard panel 4, etc?

Thanks.

Tags (2)
0 Karma

Ayn
Legend

Not entirely sure how you're defining "app" and a secondary join in this context, but if you mean using a base search in a dashboard and then process its results in different ways for different panels, then sure. Have a look at the docs regarding post processing: http://docs.splunk.com/Documentation/Splunk/latest/Developer/PostProcess

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...