Dashboards & Visualizations

What are the differences and pros/cons between inline search and saved search?

Explorer

Hi there,

I created some Pivots and Dashboards...
All my graphics are presented as Inline Search on the Dashboards at the current time.

Question is: Should I converted it to Report type, and what is the reason to do it?

1 Solution

SplunkTrust
SplunkTrust

Reports are saved searches. Common reasons to convert is reusability in other dashboards or as a standalone report/alert, scheduling, acceleration, and general organization of your knowledge objects.
Common reasons to not convert - less pollution of your app's namespace from reports only used on one dashboard, speed of changes during dashboard development, and general laziness.

View solution in original post

Revered Legend

SplunkTrust
SplunkTrust

Reports are saved searches. Common reasons to convert is reusability in other dashboards or as a standalone report/alert, scheduling, acceleration, and general organization of your knowledge objects.
Common reasons to not convert - less pollution of your app's namespace from reports only used on one dashboard, speed of changes during dashboard development, and general laziness.

View solution in original post

Explorer

Thank you Martin for the answer!

0 Karma

Communicator

@martin_mueller Hey just a clarification , if i have 1 saved search which i have incorporated at 5 dashboards , will this search run 5 times or just a single run will populate all dashbaord. Thanks in advance

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!