Dashboards & Visualizations

How do I reuse a saved search in a dashboard?

gauravmishra15
Path Finder

Hi Team,

I am working to design a couple of dashboards which will be accessed by a larger audience. The dashboard will be comprised of certain related and individual searches. There is a requirement of auto refresh. I am currently using the concept of post process where a parent search object can be re-utilized multiple times.

In order to accommodate more charts in my dashboard, I am looking for an option (preferably saved search) to run in scheduler and utilize the pre-populated search results in my dashboard, provided this is possible in SPLUNK. This will point all my user hits to a single search result.

Please let me know if this is possible and how to use the saved search results.

0 Karma
1 Solution

somesoni2
Revered Legend

What you need is "loadjob" command, which will fetch the latest result of the saved search execution. See more here.

http://docs.splunk.com/Documentation/Splunk/6.2.0/SearchReference/Loadjob

View solution in original post

0 Karma

somesoni2
Revered Legend

What you need is "loadjob" command, which will fetch the latest result of the saved search execution. See more here.

http://docs.splunk.com/Documentation/Splunk/6.2.0/SearchReference/Loadjob

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...