How do I create a static dashboard?

[ericlarsen]

New Splunk user (6.2.1). I need to run a scheduled search once a week and post the results to a dashboard. The dashboard cannot be dynamic, it must display the static search results from the last time the search was ran (so in this case, it would get updated once a week).

Any suggestions?
Thanks.

[koshyk]

Lot of Ways
- If it is static view (forever, as some team would change into dynamic quite soon ), then you can enable using SimpleXML
- if it is dynamic, best bet is to use "sideviewutils"

An example of simple XML implementation below (Create a dashboard, and then edit the dashboard source with tag)

<?xml version='1.0' encoding='utf-8'?>
 <dashboard>
   <label>Sample Saved Search</label>
   <row>
     <chart>
       <searchName>my_Saved_Search</searchName>
       <title>my TItle</title>
          <option name="charting.chart">line</option>
     </chart>
   </row>
 </dashboard>

[jmheaton · Accepted solution]

Hello,
(assuming that your report is already scheduled)

Go to the dashboards page.
Create a new dashboard that you will use and embed the report within.
Click Add Panel and select (New from Report) and select your saved search. That will slide out another menu showing details about the report as well as data from the last occurrence.

Thanks

James

[ericlarsen]

Works great. Thanks!