Dashboards & Visualizations

Dynamic search results display

danillopavan
Communicator

Hello all,

I have one dashboard with 4 panels. Each panel has different element display like: single value, status indicator, gauge chart and hoeshoe meter. Just would like to know if there is any way to have dynamic behaviour in one of the panel to display differents search every 2 minutes for example keeping others panels without any modification - dont want to reload entire dashboard - just would like to update the view of 1 panel showing different search every 2 minutes. Is it possible?

Thanks and regards,
Danillo Pavan

Tags (1)
0 Karma

danillopavan
Communicator

Hello rphillips, many thanks for your prompt answer.

You answered 50% of my problem..many thanks! Other 50%: how I can use different search query for each change..i mean...lets suppose that I include refresh=120 seconds...In 10 min I would like to have 5 different results...in my case the result of the search will always return 5 lines...and i would like to show each result for each interval. 0-2 mins: result line 1, 2-4 mins: result line 2, 4-6 mins: result line 3, 6-8 mins: result line 4 and 8-10 mins: result line 5. Is it possible?

0 Karma

rphillips_splk
Splunk Employee
Splunk Employee

Here is an example dashboard with one panel that refreshes every 5 sec and the other panel with no refresh, which will refresh when the dashboard refreshes every 30sec

<dashboard refresh="30">
  <label></label>
  <row>
    <panel>
      <title>refresh panel every 5sec</title>
      <table>
        <search>
          <query>index=_internal | stats count by host</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
          <refresh>5</refresh>
        </search>
        <option name="count">20</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
  <row>
    <panel>
      <title>refresh panel with dashboard refresh every 30 sec</title>
      <table>
        <search>
          <query>index=_internal | stats count by host</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="count">20</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...