Splunk Search

Scheduled search in a dashboard

bagarwal
Path Finder

Hello Everyone,

I have created a dashboard and wants the result for last 7 days; and want to schedule it and run every day , say at 9:30 pm . So, next morning when I open the dashboard it gives me the result immediately. I didn't find any option . For the report I know there are options. Is it something , we need to add cron schedule in xml file of the dashboard .

Kindly help.

Thanks in advance.

Best Regards,

Binay Agarwal

0 Karma
1 Solution

mayurr98
Super Champion

Hello @bagarwal

Dashboard panels don't really cache information. They run each panels search at the time of the dashboard loading. However, you can schedule a report and import the results of the scheduled report into a dashboard panel. For instance, if you scheduled a report to run once a day at 00:00 then the dashboard would show the results of the scheduled report.

let me know if this helps!

View solution in original post

0 Karma

mayurr98
Super Champion

Hello @bagarwal

Dashboard panels don't really cache information. They run each panels search at the time of the dashboard loading. However, you can schedule a report and import the results of the scheduled report into a dashboard panel. For instance, if you scheduled a report to run once a day at 00:00 then the dashboard would show the results of the scheduled report.

let me know if this helps!

0 Karma

bagarwal
Path Finder

Thanks @mayurr98 for the help.

0 Karma

reynlds
Explorer

Is it possible to use the report through the dashboard as a "search base"? I'd like to have a couple of input fields that query the report as part of the dashboard, including a date picker. My users don't have access to my index, but I could allow access to the report.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...