Dashboards & Visualizations

Dashboard - graph update

jonastr86
Engager

Hi

Is there a way to specify how often a graph, on a dashboard, can update?
I want my graph to update one time each minute, and not real time.

Matthias_BY
Communicator

Hi,

To only refresh on a dashboard 1 panel:

  1. save the Search as a Report
  2. Schedule it to run per minute with CRON Schedule (*/1 * * * *)
  3. add it to the dashboard as report (not as INLINE Search)

this will result that the report is loading even you're not watching your dashboard. keep this in mind. it's useful approach with a lot of people work with the same dashboard to avoid loading the reports multiple times. however if you have only 1 user who watches the dashboard the following one will be better for scaling in this way:

** To refresh the full dashboard every minute: **
1. open your dashboard in editing mode
2. select "edit xml"
3. modify the dashboard stanza:

this will only refresh the dashboard view if it's opened.
http://docs.splunk.com/Documentation/Splunk/6.0.3/Viz/PanelreferenceforSimplifiedXML#Dashboards_and_...

Keep an eye to the next Splunk Version release - it might contain a per panel refresh configuration ;-).

Br
Matthias

jonastr86
Engager

It can be done like this:
-> Last 60 min graph (not real time)
-> Dashboard update: each minute

But this is not an optimal solution.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...