Hi Experts,
We have Dashboard created, it takes data from 3 Databases using Db connect. This dashbaord has around 15 Panels. Data in source data base is updated once day in Database.
With my current dashboard, every time I open dashboard it runs query on index and takes lots of time also we have given access to 15+ users they also run same dashboard and takes long time.
Is there any way where I can run dashboard once and keep that cachaced and next every run it should run from cache.
Please suggest.
Have a look at following posts for tips on improving dashboard performance
https://answers.splunk.com/answers/126105/dashboard-best-practices-performance.html
https://answers.splunk.com/answers/246437/how-do-i-optimize-the-performance-of-my-dashboard.html
Hi Team,
Does report option allow for drill down option?
Hi chanduira,
I think you should use scheduled reports rather than real-time reports for dashboard panels when possible to reduce processing load and improve performance.
Not using scheduled reports can impact search processing loads and concurrent search limits. For example, If fifty users access a particular dashboard, panels not backed by scheduled reports cause their reports to rerun fifty times.
Scheduled reports do not require the search to run each time a user loads the dashboard. Panels backed by scheduled reports show results from the last scheduled run of the report.
You can find details here:
http://docs.splunk.com/Documentation/Splunk/6.5.0/Viz/WorkingWithDashboardPanels#Use_scheduled_repor...
Hope it helps!
Thanks!
You can used savedsearches
to populate your dashboards. More here http://docs.splunk.com/Documentation/Splunk/6.5.0/Viz/Savedsearches