Dashboards & Visualizations

How does a post-process search work in Splunk?

sainadh1247
New Member

How do post-process searches work in Splunk?

In my dashboard there are 4 panels. Around 3-4 sub searches are repeating in every panel which resulting performance issue and dashboard not displaying any data.

Using Post-process searches will be helpful in my scenario. Or else please suggest other alternatives.

0 Karma

cmerriman
Super Champion

a post process is used as the base search, not as the subsearch. You might benefit more from creating a summary index or a data model to try to accelerate performance.

0 Karma

sundareshr
Legend

Without looking at your dashboard and the queries, it is hard to tell. If done right, post process could significantly help dashboard performance. However, there are some limitation you have to be aware of when you design your dashboard.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/Savedsearches#Post-process_searches

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...