Splunk Search

how can you run one search and share that data with multiple panels

TDR57
Explorer

How can or is there a way of running one search and sharing the resulting data amongst multiple panels in a Dashboard. I am trying to reduce the number of searches that is performed
in my dashboard

0 Karma
1 Solution

niketn
Legend

@TDR57, you should check out Post Processing searches (carefully go through best practices as well). There are couple of Post Processing Examples covered in Splunk Dashboard Examples app as well.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

kyaparla
Path Finder

Yes, it can be done thru post processing searches.

Please check this link for more info.

http://docs.splunk.com/Documentation/Splunk/7.0.2/Viz/Savedsearches#Post-process_searches

0 Karma

niketn
Legend

@TDR57, you should check out Post Processing searches (carefully go through best practices as well). There are couple of Post Processing Examples covered in Splunk Dashboard Examples app as well.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...