In refresh option splunk is not doing any data only refresh. They are doing simple page refresh.
You can achieve that functionality by using simple javascript.
<!-- Custom Refresh>
<form script="custom_refresh.js">
<label>Test_Refresh</label>
<row>
<panel>
<html>
<input id="is_refresh_enabled" type="checkbox" checked="">Refresh</input>
</html>
</panel>
</row>
<row>
<panel>
<event>
<search>
<query>index="_internal" | head 10</query>
</search>
<option name="count">20</option>
<option name="list.drilldown">none</option>
<option name="list.wrap">1</option>
<option name="maxLines">5</option>
<option name="raw.drilldown">full</option>
<option name="rowNumbers">0</option>
<option name="table.drilldown">all</option>
<option name="table.sortDirection">asc</option>
<option name="table.wrap">1</option>
<option name="type">list</option>
</event>
</panel>
</row>
</form>
.
//custom_refresh.js
// Place this file inside /appserver/static/ folder of your application
require([
"jquery",
"splunkjs/mvc",
"splunkjs/mvc/simplexml/ready!"
], function($, mvc){
console.log("Test");
setInterval(function(){
if(document.getElementById("is_refresh_enabled").checked){
window.location.reload();
}
}, 10000);
});
Refer Javascript related tweaks here
... View more