Dear Splunk Community,
I have a dashboard with a base search that aggregates data and takes a bit to run. "Underneath" it are supposed to be a few pulldown modules to filter the following postprocesses.
I would like the base search only to run when the dashboard is loaded, but not to rerun when the downstream pulldown values are selected.
Here only the postprocesses should rerun/autorun.
Any advice on how to achieve that or how to explain my problem more clearly is greatly appreciated.
Thanks in advance,
C
Here my simplified samplecode:
<module name="Search" autoRun="True">
<param name="search"> my Base Search
</param>
<module name="Pulldown">
<param name="label">PulldownFilter</param>
<param name="name">Filter</param>
<module name="PostProcess" autoRun="True">
<param name="search"> my PostProcessSearch $Filter$
</param>
<module name="HiddenChartFormatter"> ...
<module name="FlashChart"...
</module>
</module>
</module>
</module>
</module>
... View more