Splunk Search

how can you run one search and share that data with multiple panels

Explorer

How can or is there a way of running one search and sharing the resulting data amongst multiple panels in a Dashboard. I am trying to reduce the number of searches that is performed
in my dashboard

0 Karma
1 Solution

Legend

@TDR57, you should check out Post Processing searches (carefully go through best practices as well). There are couple of Post Processing Examples covered in Splunk Dashboard Examples app as well.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

Path Finder

Yes, it can be done thru post processing searches.

Please check this link for more info.

http://docs.splunk.com/Documentation/Splunk/7.0.2/Viz/Savedsearches#Post-process_searches

0 Karma

Legend

@TDR57, you should check out Post Processing searches (carefully go through best practices as well). There are couple of Post Processing Examples covered in Splunk Dashboard Examples app as well.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!