Dashboards & Visualizations

Dynamic search results display

danillopavan
Communicator

Hello all,

I have one dashboard with 4 panels. Each panel has different element display like: single value, status indicator, gauge chart and hoeshoe meter. Just would like to know if there is any way to have dynamic behaviour in one of the panel to display differents search every 2 minutes for example keeping others panels without any modification - dont want to reload entire dashboard - just would like to update the view of 1 panel showing different search every 2 minutes. Is it possible?

Thanks and regards,
Danillo Pavan

Tags (1)
0 Karma

danillopavan
Communicator

Hello rphillips, many thanks for your prompt answer.

You answered 50% of my problem..many thanks! Other 50%: how I can use different search query for each change..i mean...lets suppose that I include refresh=120 seconds...In 10 min I would like to have 5 different results...in my case the result of the search will always return 5 lines...and i would like to show each result for each interval. 0-2 mins: result line 1, 2-4 mins: result line 2, 4-6 mins: result line 3, 6-8 mins: result line 4 and 8-10 mins: result line 5. Is it possible?

0 Karma

rphillips_splk
Splunk Employee
Splunk Employee

Here is an example dashboard with one panel that refreshes every 5 sec and the other panel with no refresh, which will refresh when the dashboard refreshes every 30sec

<dashboard refresh="30">
  <label></label>
  <row>
    <panel>
      <title>refresh panel every 5sec</title>
      <table>
        <search>
          <query>index=_internal | stats count by host</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
          <refresh>5</refresh>
        </search>
        <option name="count">20</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
  <row>
    <panel>
      <title>refresh panel with dashboard refresh every 30 sec</title>
      <table>
        <search>
          <query>index=_internal | stats count by host</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="count">20</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...