Hi All,
I need a help here .I want to know how can we refresh a query in a particular interval of time .
My requirement is to refresh a panel in a dashboard for every 10 mins from 8:30 AM to 5:30 PM .
Can you please help me through ,I have seen many people suggested to use saved searches and corn jobs but i m not comfortable using that for all the panels in a dashboard .
Thanks in advance .
Following are some of the dashnoard/panel refresh options. I am not sure as to how to make this refresh work only betwee 8:30 to 5:30 PM.
1) Refresh entire view on periodic basis (following is for every 5 minutes)
<dashboard refresh="300">
or
<form refresh="300">
2) Individual Panel auto-refresh
(i) Splunk Enterprise 6.5 onward. Create your Search Panel and edit the search to add Auto Refresh Delay or do the same via Simple XML for specific Search Panel add following code
<refresh>5m</refresh>
(ii) refresh.auto.interval to refresh individual panel (deprecated feature now, however you can use the same in case you are using Splunk Enterprise 6.1 or greater but not on Splunk 6.5)
<option name="refresh.auto.interval">300</option>