Knowledge Management

Searchid for a dashboard

SplnkUse
Path Finder

Hello

Can I get the searchid for the search that is triggered by a dashboard?

What is the syntax to use this searchid to create an alert?

Will this searchid trigger the search of the same dashboard even if the underlying search code of the dashboard changes?

Thanks!

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

you can try this, when you are running dashboard

| rest /services/search/jobs 
| cluster field=provenance showcount=t
| search dispatchState="RUNNING" AND provenance="UI:Dashboard:<Your dashboard name/label>"
| table cluster_count id dispatchState provenance

r. Ismo 

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>