Dashboards & Visualizations

How to use Accelerated Reports in a Dashboard

john_glasscock
Path Finder

I have a report "CheckPoint Blocks" that has a time span of 1 hour.

I have accelerated that report for 1 month.

I have a Dashboard and have added from Reports "CheckPoint Blocks".

The dashboard panel shows data for the 1 hour of the original report.

How do I show data from the Accelerated Report for 1 month in the dashboard?

0 Karma

somesoni2
Revered Legend

Does the dashboard has time range picker input and the panel search is using that time range picker?

0 Karma

john_glasscock
Path Finder

No, I was in the dashboard and Added Panel from New Report which does not have a time picker.

I added a time picker to the dashboard, but that has not effect on the panel the report is in.

So, I added another panel. I created a panel with the exact same search string as the report, and change the time range to 30 days, it doesn't want to use the summary index from the report acceleration.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...