Dashboards & Visualizations

Single dashboard from mulitple app searches?

steve
Path Finder

I use a couple of apps to generate searches which help monitor the state (usage, attacks, performance, etc) of some internal services. At the moment, I need to switch between apps to get a full picture of the state of those services. I would like a single dashboard to see all at once. When I save searches as dashboard panels, I am only able to add the panels to dashboards within the app I am working in. Any ideas on how to save them out to dashboards in the main search app?

Thanks

Tags (1)
0 Karma
1 Solution

Ayn
Legend

Make sure the permissions of the relevant saved searches are set so that they're globally viewable, not only in their respective apps. You can set this in the saved searches section in the manager. Once they're globally accessible you can put them all in the same common app. One gotcha that you could encounter is that saved searches could be referring to other knowledge objects (macros, tag, eventtypes...) that are only viewable in their own app. If that's the case, do the same thing with setting permissions on these knowledge objects as well.

View solution in original post

Ayn
Legend

Make sure the permissions of the relevant saved searches are set so that they're globally viewable, not only in their respective apps. You can set this in the saved searches section in the manager. Once they're globally accessible you can put them all in the same common app. One gotcha that you could encounter is that saved searches could be referring to other knowledge objects (macros, tag, eventtypes...) that are only viewable in their own app. If that's the case, do the same thing with setting permissions on these knowledge objects as well.

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...