Dashboards & Visualizations

How to send job to background in simpleXML?

sistemistiposta
Path Finder

Hello,

  if I want to send a job in background from a dashboard I have to Open in Search and after that I can perform the choice.

I wonder if there is some trick to directly send a dashboard job to background.

Do you have any hints?

Thank you and happy splunking

Marco

Labels (3)
0 Karma

nagendra1111
Loves-to-Learn

@thahir @PickleRick 

I am testing something with 

/api/search/jobs/$SID$/control?action=save
it is working on and off , sometime it work and sometime not.
0 Karma

thahir
Contributor

Hi @nagendra1111 ,

Splunk does not currently support sending dashboard panel searches directly to background jobs from the UI.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What are you trying to achieve? If it is to hide a panel / row until the results are available, then you can use tokens set or unset by the <done> / <processing> clauses of the query and make the panel / row depend or reject said tokens.

0 Karma

sistemistiposta
Path Finder

Hello,

   I try to explain. Some searches can be slow to end. Let suppose I write a dashboard where I allow an input time interval of one year for a search.

So I would like that a user that enter a dashboard and fill a form could also choose to perform the search in background, receiving through email a message when the search ends. Obviously in this way the user will see the result in the provided link, he will not see the result in the dashboard.

I know that in this way there is the risk that users could run too many search in background, but this is another problem.

Thank you very much

0 Karma

nagendra1111
Loves-to-Learn

did you able to find solution for this.

0 Karma

PickleRick
SplunkTrust
SplunkTrust

There is no such functionality in SimpleXML. And it's understandable to some extent - dashboards are meant for interactive work. You probably could create something like that with custom JS but it won't be easy. 

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...