What are the differences and pros/cons between inline search and saved search?

[maxdranitski]

Hi there,

I created some Pivots and Dashboards...
All my graphics are presented as Inline Search on the Dashboards at the current time.

Question is: Should I converted it to Report type, and what is the reason to do it?

[somesoni2]

Some reasons are mentioned here.

http://docs.splunk.com/Documentation/Splunk/6.1.2/Report/Aboutreports

[martin_mueller · Accepted solution]

Reports are saved searches. Common reasons to convert is reusability in other dashboards or as a standalone report/alert, scheduling, acceleration, and general organization of your knowledge objects.
Common reasons to not convert - less pollution of your app's namespace from reports only used on one dashboard, speed of changes during dashboard development, and general laziness.

[maxdranitski]

Thank you Martin for the answer!

[nawneel]

@martin_mueller Hey just a clarification , if i have 1 saved search which i have incorporated at 5 dashboards , will this search run 5 times or just a single run will populate all dashbaord. Thanks in advance