Dashboards & Visualizations

how do I get live updates into a Splunk dashboard?

rajneeshc1981
Explorer

I am creating a punch card dashboard. How do I get it to update every few seconds ?.

0 Karma

Rob2520
Communicator

If the intent is to refresh the entire dashboard, you need to add the refresh attribute and indicate the interval in seconds.

For example:

 <form refresh="30">

http://docs.splunk.com/Documentation/Splunk/6.3.0/Viz/PanelreferenceforSimplifiedXML#Dashboards_and_...

pramit46
Contributor

Additionally, you can also change your search to real-time (rt) search in order to get the data as soon as it appears into splunk. However, that may be costly in terms of performance.

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...