Thanks Pickle. The original poster had 4 hr recent data. My data is on user counts and some high level stats, so it's fine as a monthly pull. For others who might share my scenario, I ended up going with a lookup table. I first saved and scheduled a report to run once a month with my 20+ key values. Then on my dashboard, I used inputlookup to key in on each variable and place it where I wanted it on the dashboard.
... View more
Thanks. I'd prefer the query to run once a month, and that stale 30d data be fetched for each relevant panel. I think you're saying that if I use a base search, I can nix the extra panel heavy lifts. But I worry that the 30 day base query lift will have to run with each dashboard load.
... View more
Any fresh takes on this? I have the exact same conundrum..... I have 1 saved report which outputs multiple single values. And I'd like a few dashboard panels that distinctly call out those single values.
... View more
Thanks Rick. I'm setting up new dashboards so we don't have existing tabs now. I want to confirm the most seamless way to create these new dashboards, given that I plan for them to use the proper Tabs feature once we've got access to it.
... View more
Our current Splunk version doesn't have the Dashboard Tabs feature, but we'll be upgrading to one that does have it in 3 months. I need to setup some dashboards "now" with the intent that they feed in smoothly to the coming Tabs feature. Is there any nuance to this? Or am I simply creating 5 separate dashboards, to later reposition as Tabs?
... View more