Splunk Search

How to re-run a relative time search on click of the submit button?

helenashton
Path Finder

How to re-run a relative time search of the last 15 minutes on click of the submit button and refresh with the updated time?

I am using Simple XML (with JS) and I have a lot of dashboards which do searches (with various input) based on relative times (i.e. last 15 minutes). Say we ran the search 10 minutes ago (for the last 15 mins), and now we want to see the results for the last 15 minutes again, and so no input changes, but we want the search to run again and new results populate.

I have tried this with a submit button, but it doesn't look like the search re-runs.

Thanks in advance.

nick405060
Motivator

https://answers.splunk.com/answers/758332/is-it-impossible-to-resubmit-a-dashboard-search-in.html

I cannot believe you're the only one who has had this issue besides me. It is really not too much to ask for this functionality. The entire point of a dashboard is to have a tool to be able to do stuff like this.

0 Karma

masonmorales
Influencer

I've encountered this in the past, and I don't think there is a way to do a soft refresh on-demand from the GUI. You could either have your users hit refresh (F5), or you could implement an auto-refresh in your dashboard tag. Example below (value in seconds).

<dashboard refresh="300"> 

helenashton
Path Finder

I guess the F5 might be the only option - refresh interval is not predictable, and need to keep all form input intact.

Shame 😞

0 Karma

somesoni2
SplunkTrust
SplunkTrust

Could you post you dashboard xml? Does your dashboard visualization using common/shared Time-range Picker (or do you have a time-range picker)?

0 Karma

helenashton
Path Finder

I have lots of different dashboards. All use the following type of time picker though (simple XML):

and I may have various types of input elements (text, checkboxes, dropdown etc.).

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...