Dashboards & Visualizations

Multiple Fieldsets or duplicate fields, submit, and panels

alex_huffman
Engager

I'm building dashboards in a Splunk app, using Splunk Enterprise 9.2.0.  I want to be able to run a query on a dashboard, based on my filters, time picker, etc. (with a Submit).  This, I know how to do.  But, I need to be able to scroll down and do the exact same thing again below, so I can keep my original output up at the top. 

I need to know how to basically do this sort of dashboard (all in the same dashboard)

Fieldset 1

  • <Filters, Time-picker, Submit, etc>
  • Panels for Fieldset 1 (charts, tables, etc.)

** Run the first one, keep that output, and then run the one below, while the other results remain the same

Fieldset 2 (or duplicate)

  • <Filters, Time-picker, Submit, etc>
  • Panels for Fieldset 2 (charts, tables, etc.)

 

...and if it's any different, how to keep drilling down to:

Fieldset 3, Fieldset 4, and so on...

Does anyone know how to do that, or is there a book/reference on that?  Thanks.

Labels (4)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

maybe you could use several row and panels with some reports and/or base and post searches?

See more https://docs.splunk.com/Documentation/Splunk/9.2.0/Viz/Savedsearches

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...