- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
lennys26
Communicator
11-07-2022
05:05 AM
On an existing dashboard I have a rather complex query that generates a timechart on which I am looking to use annotations to highlight threshold breaches.
Is there any way to avoid having to run the same query twice (once to create the initial chart, and a second time for the annotations).
Oh -- [I think I have may be answering my own question,] is the answer here going to be to use a base search?
Thanks.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
11-07-2022
07:12 AM
Yes, a base search will be a good start.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
11-07-2022
07:12 AM
Yes, a base search will be a good start.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
lennys26
Communicator
11-07-2022
07:48 AM
@richgalloway - Thanks. I tend to shy away from base searches for some reason.
