Dashboard Template

[Zyon]

Hello!

I've created a Dashboard with many panels. These panels are create for FebLog.log.

What i need to do now is to add in MarLog.log, and use the same Dashboard and panels to display the same visualization. Is there anyway for me to do so without having to edit the sources one by one in each panel?

Thank You!!

[Dimitri_McKay · Accepted solution]

You could pull in FebLog.log as a source as long as two things are taking place.
1. You use the same sourcetype that you used for FebLog.log
2. Your searches are based on that same sourcetype not by index or source.

If you've tied your searches to a specific index or source, then you'll be stuck and have to edit those searches.

[Ayn]

Not a real answer per se, but the Dashboard Examples app has excellent examples on how to do all kinds of stuff like this. Check it out: http://splunk-base.splunk.com/apps/64805/splunk-dashboard-examples