Dashboards & Visualizations

find last time dashboard run

sarit_s
Communicator

Hello

is it possible to get a list of all the dashboards that was running for the last * days ?

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Yes it's possible. You can start with this query, if you have access to _audit log.

 

index=_audit user!=splunk-system-user app=* provenance="*" 
| stats last(_time) as _time count values(provenance) as Dashboard by app

 

r. Ismo 

0 Karma

sarit_s
Communicator

thanks, it looks good but i need the last time of each dashboard and not grouped by app

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Like this?

index=_audit user!=splunk-system-user app=* provenance="*" 
| stats last(_time) as _time count by provenance
| rename provenance as Dashboard

r. Ismo 

0 Karma

sarit_s
Communicator

thanks

is it possible to add the user to this list ?

0 Karma

isoutamo
SplunkTrust
SplunkTrust
index=_audit user!=splunk-system-user app=* provenance="*" 
| stats last(_time) as _time values(user) as users count by provenance
| rename provenance as Dashboard

 

If you haven't enough user experience about Splunk and SPL there are lot of trainings available. Some free and other payable. You can found Splunk's own training offerings from https://education.splunk.com/catalog

There is also lot of other training / learning material on other sites including YouTube.

r. Ismo

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...