Hi folks, I have the following question about a dashboard built within Dashboard Studio. My dashboard consists of several filter elements, filling search tokens, and some panels (9) to visualize the corresponding events. The search queries within the data sources always start with the same repeating structure: index=index1 field1="$token1$" field2="$token2$" field3="$token3$" followed by a part of the query that is custom for every data source. So my aim was to outsource the repeating part of the query into something reusable, so that if changes are necessary (adding or removing some filters), I don't have to change the query in every single data source. Initially, I thought of using a macro, but with parameterization, I gain nothing because every data source still has to be adjusted (new filter -> new parameter). So my question is: Do I have a thinking error, or is there another way to achieve my goal?
... View more
