Splunk Enterprise

Splunk DB Connect Scheduler:

pprakash2
Explorer

I have configured DB Connect App to SQL Server. I have created a dashboard in Splunk DB Connect App, by using queries based on DMVs.
I want to control the execution of the query, how do I schedule it? It executes every time I open the dashboard. I want the query to execute at scheduled time only, not every time I open the dashboard. is there a way to control this? Please let me know.

Tags (1)
0 Karma

ryanoconnor
Builder

Have you tried scheduling the entire dashboard, or converting that specific panel to a scheduled search?

You also could look into setting up DB Inputs so that data is ingested into Splunk on a regular interval.

0 Karma

pprakash2
Explorer

Thanks, I have edited the XML source as which will refresh my dashboard every 5 minutes. Does this mean the query behind dashboard will be executed only once in 5 minutes?
Please let me know how do I schedule a dashboard (suppose I want to run DMV query at specific time), I can scheduling only for Alerts, when I save a search string as an alert, I get option to schedule it. But not for a Dashboard panel.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...