Tips to improve splunk dashboard performance?

[karthi2809]

Hi All,

I've been working on a dashboard in Splunk and I am noticing that it takes a considerable time amount of time to load. How to optimize the performance of my dashboard.

1.created most of the queries  in base search.

2.How to make panels as reports. If we made as report will dashboard will more effective?. And I am using dynamic search in my dashboard.

Could you please provide some tips or some example to improve the speed and performance of my Splunk dashboard.

Thanks,

Karthi

[gcusello]

Hi @karthi2809,

surely dashboard performances can be improved using base search, but always the best approach to have a performant dashbaord is working to have having performant searches.

If you can, you could use all the ways to accelerate searches: use of tstats (when possible), accelerated Data Models, use of Summary indexes, if possible use of reports (especially when the dashboard is used by many users).

The way to improve performances of your searches depends on the searches themselves.

Ciao.

Giuseppe

[karthi2809]

Thanks @gcusello 

After creating dashboard.Can we make it the dashboard panel as reports will be more effective?

[gcusello · Accepted solution]

Hi @karthi2809,

yes surely, but I hint to start to optimize your search using DataModels or Summary indexes.

Ciao.

Giuseppe