Dashboards & Visualizations

Steps to setup live dashboard

tb5821
Communicator

I currently have my dashboard setup so that it runs every time its loaded but I'd like for it to be live dashboard and not need a refresh when I want more up-to-date data. I'm running 5.0.4, what are the steps I need to take to convert my current dash?

Tags (1)
0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi tb5821

either you modify your dashboard to reload every other minute by adding

<view refresh="60" template="dashboard.html">

or you modify your searches used in the dashboard to be real-time searches by adding

earliest=rt-5m latest=rt

to your searches. This will perform a real-time search over the last 5 minutes and will display the search result continuously in real-time.

Find more about real-time dashboards in the docs

hope this helps ...

cheers, MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi tb5821

either you modify your dashboard to reload every other minute by adding

<view refresh="60" template="dashboard.html">

or you modify your searches used in the dashboard to be real-time searches by adding

earliest=rt-5m latest=rt

to your searches. This will perform a real-time search over the last 5 minutes and will display the search result continuously in real-time.

Find more about real-time dashboards in the docs

hope this helps ...

cheers, MuS

tb5821
Communicator

Thanks I ended up using the earliest/latest params.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...