Dashboards & Visualizations

One dashboard for all Splunk users

b_chris21
Communicator

Hello,

I want to have one main dashboard for all Splunk Users. But I see that everytime that a user opens the dashboard, it creates as many searches as the panels, which is normal.

Is there a way to have a dashboard that automatically refreshes eg. every 5 minutes for all users in order to save resources?

Shall I save the searches as reports and put the reports in panels of the dashboard?

Thank you in advance.

Regards,

Chris

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @b_chris21,

You have to create a scheduled report for each panel of your dashboard and link it to the dashboard.

In this way, also having many users, there's only one search for each panel executed by the scheduled report and no searches from the users.

Ciao.

Giuseppe

 

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @b_chris21,

You have to create a scheduled report for each panel of your dashboard and link it to the dashboard.

In this way, also having many users, there's only one search for each panel executed by the scheduled report and no searches from the users.

Ciao.

Giuseppe

 

b_chris21
Communicator

That's worked fantastic, grazie mille Giuseppe!

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...