Dashboards & Visualizations

Is there a better way to do a dashboard using same database input for multiple panels?

dirtebird
Explorer

I'm creating a new dashboard using an existing database input.  This dashboard will have multiple (7+) panels searching the same database input, with the same filtering criteria, but different grouping and aggregating.  I was wondering if there is a better way to do this?  Does this cause 7+ separate reads to the same DBInput when it could be accomplished in one?  Thanks!

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

By default, each search in a dashboard runs independently.  That means 7 panels using the dbxquery command will generate 7 reads against the database.

The way to avoid that is with what's called "post-processing".  In post-processing, a base search makes the query against the database (or index) and later queries further process the results (grouping and aggregating).

See https://docs.splunk.com/Documentation/Splunk/9.0.0/Viz/Savedsearches#Post-process_searches_2 for details.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

By default, each search in a dashboard runs independently.  That means 7 panels using the dbxquery command will generate 7 reads against the database.

The way to avoid that is with what's called "post-processing".  In post-processing, a base search makes the query against the database (or index) and later queries further process the results (grouping and aggregating).

See https://docs.splunk.com/Documentation/Splunk/9.0.0/Viz/Savedsearches#Post-process_searches_2 for details.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...