Splunk Search

What is an inline Search, How to create one, Impact of using it, Any Splunk documentation for inline search.

gagandeep_arora
Path Finder

What is an inline Search, How to create one, Impact of using it, Any Splunk documentation for inline search.

Tags (1)
0 Karma
1 Solution

woodcock
Esteemed Legend

The term inline search only has context with dashboard XML code. It means that instead of referencing a saved search with search ref you imbed the SPL search string directly inside of the XML. The best documentation on this is here:
http://docs.splunk.com/Documentation/Splunk/latest/Viz/Savedsearches

View solution in original post

gagandeep_arora
Path Finder

Thanks Woodcock, I got much clarity from the article.

The search query you shared in the other post is listing all the inline searches executed within a SH Cluster :
https://answers.splunk.com/answers/551415/identify-which-dashboards-are-using-inline-searche.html

It is giving me 2300 search results for inline searches, its just excluding 6 searches may be those were referred as saved searches.

0 Karma

woodcock
Esteemed Legend

The term inline search only has context with dashboard XML code. It means that instead of referencing a saved search with search ref you imbed the SPL search string directly inside of the XML. The best documentation on this is here:
http://docs.splunk.com/Documentation/Splunk/latest/Viz/Savedsearches

View solution in original post

gagandeep_arora
Path Finder

Thanks, It's a useful link.

0 Karma

valerie_tan
Path Finder

Hi woodcock, may I know if it is possible to refresh the inline search from the original data source with a click? Does the auto-refresh interval setting actually work on this Inline Search?
Thank you

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!