I want to have one main dashboard for all Splunk Users. But I see that everytime that a user opens the dashboard, it creates as many searches as the panels, which is normal.
Is there a way to have a dashboard that automatically refreshes eg. every 5 minutes for all users in order to save resources?
Shall I save the searches as reports and put the reports in panels of the dashboard?
Thank you in advance.
You have to create a scheduled report for each panel of your dashboard and link it to the dashboard.
In this way, also having many users, there's only one search for each panel executed by the scheduled report and no searches from the users.
View solution in original post
That's worked fantastic, grazie mille Giuseppe!