I've created a Dashboard with some panels. Now I need to import new data and create a new index, but the data format are the same as before so I want to use the same dashboard and panels to display the same visualization.
Is there any ways for me to do so without writing each query again and then save to dashboard?
If it is a simple xml dashboard open old dashboard, click Edit -> switch to Source and copy the xml to your text editor replace index/source/sourcetypes that you wish and replace the same with content in Source tab. Click save.
Same you can do it from backend however you need access to Splunk host and restart might be required.
An upvote would be appreciated and Accept solution if it helps!