Splunk Search

Why is Auto Refresh not working with Post Process Search in a dashboard panel?

Venkat_16
Contributor

Hi All,

We have a dashboard with 6 panels in which for one panel we have implemented a post process search. The issue here is for the other 5 panels, auto refresh is working fine, but for the panel with Post Process search, the auto refresh is not happening. I removed the postprocess for the same panel and checked the auto refresh worked. Used the below tag for auto refresh.
option name="refresh.auto.interval"

Anybody is facing similar issue ?

0 Karma

aholzel
Communicator

I have the same problem, I think this is because the post process search only runs if the dashboard is loaded (or the entire dashboard is refeshed).

what you can do is put the base search in a hidden panel like suggested here:
https://answers.splunk.com/answers/205510/is-there-a-way-to-auto-refresh-a-global-search-ind.html

Only problem I am facing now is that I want to be able to change the auto refesh value via a pulldown menu, but for some reason this doesn't work....

0 Karma

MuS
Legend

You provided way too less information, so I'll be guessing here: try putting the base search into the panel and see what happens

0 Karma
Get Updates on the Splunk Community!

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...

From Alert to Resolution: How Splunk Observability Helps SREs Navigate Critical ...

It's 3:17 AM, and your phone buzzes with an urgent alert. Wire transfer processing times have spiked, and ...