Dashboards & Visualizations

Dynamic search results display

danillopavan
Communicator

Hello all,

I have one dashboard with 4 panels. Each panel has different element display like: single value, status indicator, gauge chart and hoeshoe meter. Just would like to know if there is any way to have dynamic behaviour in one of the panel to display differents search every 2 minutes for example keeping others panels without any modification - dont want to reload entire dashboard - just would like to update the view of 1 panel showing different search every 2 minutes. Is it possible?

Thanks and regards,
Danillo Pavan

Tags (1)
0 Karma

danillopavan
Communicator

Hello rphillips, many thanks for your prompt answer.

You answered 50% of my problem..many thanks! Other 50%: how I can use different search query for each change..i mean...lets suppose that I include refresh=120 seconds...In 10 min I would like to have 5 different results...in my case the result of the search will always return 5 lines...and i would like to show each result for each interval. 0-2 mins: result line 1, 2-4 mins: result line 2, 4-6 mins: result line 3, 6-8 mins: result line 4 and 8-10 mins: result line 5. Is it possible?

0 Karma

rphillips_splk
Splunk Employee
Splunk Employee

Here is an example dashboard with one panel that refreshes every 5 sec and the other panel with no refresh, which will refresh when the dashboard refreshes every 30sec

<dashboard refresh="30">
  <label></label>
  <row>
    <panel>
      <title>refresh panel every 5sec</title>
      <table>
        <search>
          <query>index=_internal | stats count by host</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
          <refresh>5</refresh>
        </search>
        <option name="count">20</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
  <row>
    <panel>
      <title>refresh panel with dashboard refresh every 30 sec</title>
      <table>
        <search>
          <query>index=_internal | stats count by host</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="count">20</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma
Get Updates on the Splunk Community!

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...

Explore the Latest Educational Offerings from Splunk [January 2025 Updates]

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...