- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
While creating a dashboard i used scheduled reports to present visuals.
The problem is, the reports have overlapping queries as they the dashboard was originally implemented with base searches.
How can I use scheduled reports as base searches?
or,
How can i use data from the same scheduled report and create different visuals in the same Dashboard?
Thanks and Regards.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Yes, you can use reports as base searches like this
<search id="base_name" ref="report_name"/></search>
...
<search base="base_name">
...
See the docs here
https://docs.splunk.com/Documentation/SplunkCloud/latest/Viz/PanelreferenceforSimplifiedXML#search
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Yes, you can use reports as base searches like this
<search id="base_name" ref="report_name"/></search>
...
<search base="base_name">
...
See the docs here
https://docs.splunk.com/Documentation/SplunkCloud/latest/Viz/PanelreferenceforSimplifiedXML#search
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can use either "base" or "loadjob" to pull search results into your dashboard. The loadjob call works really well with the caveat that if the saved search has not executed successfully you wont get results.
There is a good discussion on this topic with examples here:
https://community.splunk.com/t5/Reporting/Using-a-Scheduled-Saved-Search-as-a-base-search-in-dashboa...
An upvote would be appreciated and Accept Solution if it helps!
