Reporting

Can APPx not read result of scheduled saved searches in APPy?

JYTTEJ
Communicator

I have created APPx.

In APPx I have created a number of Dashboards which use the result of scheduled saved searches in APPy.

  • or so I thought!

When I log onto APPx Dashbords SPLUNK starts to run all saved searches in the dashboard.

Why can't APPx read/get the result from the saved scheduled searches in APPy?

Do you have any solution?

Tags (1)
0 Karma

MarioM
Motivator

in your APPx's reports you could do searches with | loadjob and the infos of APPy's searches :

| loadjob savedsearch="admin:APPy:MySavedSearch" 

MarioM
Motivator

well your appx doesnot know where is the results as it is different app then loadjob is the only to get existing results...
And i think it is pretty smart to be able to load any job results anywhere!

0 Karma

JYTTEJ
Communicator

Thks - so is the best way to enter this as an inline search string in APPx's dashboards:?

| loadjob savedsearch="admin:APPy:MySavedSearch"'

  • or any smarter way?
0 Karma
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...