How do I create a base search for prebuilt panels?

[DataOrg]

i have a 4 to 5 prebuilt panels in dashboard with same search only filter conditions are different.

How to create a base search for prebuilt panels

[markbarber21]

I WISH there was a way to create a prebuilt panel and reference its Search ID in additional panels, but I don't believe it is possible.

You can create a report and reference the same report in multiple prebuilt and inlined panels.

[niketn]

@premranjithj you can create a pre-built panel with search that you need to re-use for all existing pre-built panels. The new pre-built panel with search can be added to existing dashboard where other existing pre-built panels are present and then the row that contains pre-built panel can be hidden using depends attribute to check against a token which is never set.

For ex: <row depends="$alwaysHidePreBuiltPanelWithBaseSearch$">

[DataOrg]

@niketnilay . but i am not expecting this behavior to have a hidden panel.. thanks for your reply

[niketn]

So the above should work... right?

[markbarber21]

Saving a prebuilt panel with a search with an ID works fine. However, I am not able to reference the base search in any other panels. The search does not support a ref.

    <panel ref="base_foobar"></panel>
    <panel>
      <event>
        <title>child panel</title>
        <search  base="foobar_search_id" >
        </search>
      </event>
    </panel>

[harishalipaka]

hi @premranjithj

have a look into this link :

https://answers.splunk.com/answers/544338/howwhere-to-edit-a-prebuilt-panel.html