Splunk Search

How to display several time ranged search results in one dashboard panel?


Hi guys,
Is it possible to create several searches on data, differing in time range, and then display them in one dashboard panel?

We collect a huge amount of logs in splunk and looking at 3 or 5 days old data takes enormous amount of time. I was thinking of creating saved searches on hourly base for the past 10 days and concatenate the results so I get one panel with last 3 days, another with the last 5 days and one for the last 10 days. That way I will only need to add one day to the combined result , and drop the oldest. Is that possible? If so, any tips on where to look?

I searched the questions here and the internet but couldn't find a clue. I am quite new in splunk, so maybe I am asking something stupid. Splunk Version is

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...