I want a main dashboard to pull results from multiple application dashboards. I do not want to do the same queries in the Main dashboard. Is this possible?
example:
<row> <panel> <table> <title>Overall_Status</title> <search> <query>index=clo_application_logs host IN (xxxx.com) "Unable to read the file" OR "DB ERROR" OR "JMS Exception Occurred" OR "outOfMemory" OR "ERROR - PricingManager" OR "ERROR - DataService" | stats count | eval Overall_Status=case(count>0,"CRITICAL", 1=1, "NORMAL") | append [search index=clo_application_logs host IN (xxxx.com xxxx.comm) "FAIL" | stats count | eval Overall_Status=case(count>0,"CRITICAL", 1=1, "NORMAL")] | stats count by Overall_Status | eval colour=case(test=="NORMAL", "0", test=="CRITICAL", "1", 2=2, Unknown) | sort - colour | fields Overall_Status| head 1 | appendpipe [stats count | where count="0" | fillnull value="No Results" Overall_Status]</query> <earliest>$field1.earliest$</earliest> <latest>$field1.latest$</latest> </search> <option name="drilldown">none</option> <option name="refresh.display">progressbar</option> <format type="color" field="Overall_Status"> <colorPalette type="map">{"CRITICAL":#DC4E41,"NORMAL":#53A051}</colorPalette> </format> </table> </panel> </row>
... View more