Dashboards & Visualizations

How to use Accelerated Reports in a Dashboard

john_glasscock
Path Finder

I have a report "CheckPoint Blocks" that has a time span of 1 hour.

I have accelerated that report for 1 month.

I have a Dashboard and have added from Reports "CheckPoint Blocks".

The dashboard panel shows data for the 1 hour of the original report.

How do I show data from the Accelerated Report for 1 month in the dashboard?

0 Karma

somesoni2
Revered Legend

Does the dashboard has time range picker input and the panel search is using that time range picker?

0 Karma

john_glasscock
Path Finder

No, I was in the dashboard and Added Panel from New Report which does not have a time picker.

I added a time picker to the dashboard, but that has not effect on the panel the report is in.

So, I added another panel. I created a panel with the exact same search string as the report, and change the time range to 30 days, it doesn't want to use the summary index from the report acceleration.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...