We are dealing with an issue where some of our users have a very short timeout in Splunk. We are working with Splunk to come up with better timeouts but in the meantime we need a way to stop dashboard panels form loading when a user times out to prevent them seeing partial results.
I have tried the normal tokens that are used to hide a panel until a search is done but these "stopped" searches report as done (they just have partial results). I have seen old solutions that used "finalized" but that has been deprecated. ('ve tried cancelled, fail and error as well, no luck)
Does anyone have any idea how else I can stop these panels from loading when a search is "stopped" because of a timeout?
