Dashboards & Visualizations

How can I delay searches based on dropdown selection?

michaeler
Communicator

I have a classic dashboard that has 8 separate 'pages' controlled by a dropdown selection. I just added drilldowns to almost every visualization and have around 60 searches in the dashboard and it's starting to get laggy.

Is there a way to only execute searches on the page when I select it, instead of all at once?

 

Labels (3)
0 Karma
1 Solution

efavreau
Motivator

@michaeler 

Along the lines of what Rich said, check this article with example out on how set and unset token can work to your advantage:
https://community.splunk.com/t5/Dashboards-Visualizations/How-to-set-and-unset-token-after-submit-an...

###

If this reply helps you, an upvote would be appreciated.

View solution in original post

efavreau
Motivator

@michaeler 

Along the lines of what Rich said, check this article with example out on how set and unset token can work to your advantage:
https://community.splunk.com/t5/Dashboards-Visualizations/How-to-set-and-unset-token-after-submit-an...

###

If this reply helps you, an upvote would be appreciated.

richgalloway
SplunkTrust
SplunkTrust

Have the dropdown set a token that is referenced in the related search(es).  The searches won't until the token is set.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Get Inspired! We’ve Got Validation that Your Hard Work is Paying Off

We love our Splunk Community and want you to feel inspired by all your hard work! Eric Fusilero, our VP of ...

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...