Splunk Search

how can you run one search and share that data with multiple panels

TDR57
Explorer

How can or is there a way of running one search and sharing the resulting data amongst multiple panels in a Dashboard. I am trying to reduce the number of searches that is performed
in my dashboard

0 Karma
1 Solution

niketn
Legend

@TDR57, you should check out Post Processing searches (carefully go through best practices as well). There are couple of Post Processing Examples covered in Splunk Dashboard Examples app as well.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

kyaparla
Path Finder

Yes, it can be done thru post processing searches.

Please check this link for more info.

http://docs.splunk.com/Documentation/Splunk/7.0.2/Viz/Savedsearches#Post-process_searches

0 Karma

niketn
Legend

@TDR57, you should check out Post Processing searches (carefully go through best practices as well). There are couple of Post Processing Examples covered in Splunk Dashboard Examples app as well.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...