We are setting up Mission Control as the main dashboard in our operations center (which handles both NOC and SOC since we are a very small company).
This operations center is run by non-technical staff whose main responsibility is to notify the relevant on-call administrator when an issue arises.
The problem we are facing is with the auto-refresh / auto-reload setting. While there is an option to toggle auto-refresh on or off, whenever someone interacts with the search bar or changes the time range, auto-refresh automatically turns off and stops updating.
I am concerned that an operator might search for something and fail to notice that the dashboard has stopped auto-refreshing. Is there a way to "force" auto-refresh so it stays enabled?
i have found an open feature idea - https://ideas.splunk.com/ideas/ESSID-I-545
but it dose not have enough votes.
There doesn’t seem to be a way to force auto-refresh to stay enabled after changing the search or time range. For an operations dashboard, I’d check for a kiosk/read-only mode or raise this as a feature request, since persistent auto-refresh would help prevent operators from accidentally missing new alerts.