Splunk Search

How to display several time ranged search results in one dashboard panel?


Hi guys,
Is it possible to create several searches on data, differing in time range, and then display them in one dashboard panel?

We collect a huge amount of logs in splunk and looking at 3 or 5 days old data takes enormous amount of time. I was thinking of creating saved searches on hourly base for the past 10 days and concatenate the results so I get one panel with last 3 days, another with the last 5 days and one for the last 10 days. That way I will only need to add one day to the combined result , and drop the oldest. Is that possible? If so, any tips on where to look?

I searched the questions here and the internet but couldn't find a clue. I am quite new in splunk, so maybe I am asking something stupid. Splunk Version is

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...