Splunk Search

What is the spl code to use the output of Panel_1 to other panels?

Jouman
Path Finder

Hi all,

I want to implement 2 panels in one dashboard.
Output of Panel_1 will be a list of ID that meet the search keyword and I hope to find a way to use the output as the input to Panel_2, Panel_3, and Panel_4. 
Panel_2, Panel_3, Panel_4 will use the list of ID to search but using different conditions. 

I can't find a way to make the output of Panel_1 as the input to the rest 3 Panels.

Is there any way to implement such purpose?

Moreover, is there any way to color each Panel into different color?

Thanks.

Labels (3)
0 Karma

woodcock
Esteemed Legend

Make the search from panel 1 a base search to drive all of the panels:
https://docs.splunk.com/Documentation/SplunkCloud/latest/Viz/Savedsearches

ITWhisperer
SplunkTrust
SplunkTrust

You could set up a base search which you display in panel 1 and then extend for the searches in the other panels.

0 Karma

Jouman
Path Finder

Thanks for the suggestion.

I think about this method. However, in the following Panel_2, Panel_3 and Panel_4, the search index and data are more than what Panel_1 can generated.
I found if I set Panel_1 as base_search, my Panel_2~Panel_4 are unable to execute since no sufficient index and data.
Is there any other method? 
Panel_1 is used to limit the input to Panel_2~4 while Panel_2~4 have each own condition to select the exact input from output of Panel_1.

Thanks.

0 Karma
Get Updates on the Splunk Community!

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...