Dashboards & Visualizations

Dashboard Template

Engager

Hello!

I've created a Dashboard with many panels. These panels are create for FebLog.log.

What i need to do now is to add in MarLog.log, and use the same Dashboard and panels to display the same visualization. Is there anyway for me to do so without having to edit the sources one by one in each panel?

Thank You!!

Tags (2)
0 Karma
1 Solution

Splunk Employee
Splunk Employee

You could pull in FebLog.log as a source as long as two things are taking place.
1. You use the same sourcetype that you used for FebLog.log
2. Your searches are based on that same sourcetype not by index or source.

If you've tied your searches to a specific index or source, then you'll be stuck and have to edit those searches.

View solution in original post

0 Karma

Splunk Employee
Splunk Employee

You could pull in FebLog.log as a source as long as two things are taking place.
1. You use the same sourcetype that you used for FebLog.log
2. Your searches are based on that same sourcetype not by index or source.

If you've tied your searches to a specific index or source, then you'll be stuck and have to edit those searches.

View solution in original post

0 Karma

Legend

Not a real answer per se, but the Dashboard Examples app has excellent examples on how to do all kinds of stuff like this. Check it out: http://splunk-base.splunk.com/apps/64805/splunk-dashboard-examples

0 Karma