Dashboards & Visualizations

Can search results be reused in multiple secondary join searches?

DrColombes
New Member

Can the results of a primary search be reused (without recomputing the primary search) in multiple joins with different secondary searches that go to separate panels in a dashboard?

Something like

| join [] in dashboard panel 2,
| join [] in dashboard panel 3,
| join [] in dashboard panel 4, etc?

Thanks.

Tags (2)
0 Karma

Ayn
Legend

Not entirely sure how you're defining "app" and a secondary join in this context, but if you mean using a base search in a dashboard and then process its results in different ways for different panels, then sure. Have a look at the docs regarding post processing: http://docs.splunk.com/Documentation/Splunk/latest/Developer/PostProcess

0 Karma
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...