Is it possible to save a piece of a query that you use over and over again?
For example, I want to exclude certain test IPs from all of my dashboard queries, so I might want to save and re-use the following fragment in a number of queries:
IP!="Some IP" IP!="Some Other IP"
Thanks,
Jonathan
how about those macros?
https://docs.splunk.com/Documentation/Splunk/7.0.3/Knowledge/Usesearchmacros
or maybe some base search for your panels? read all the way
http://docs.splunk.com/Documentation/Splunk/7.0.3/Viz/Savedsearches#Post-process_searches_2
hope it helps