i have a 4 to 5 prebuilt panels in dashboard with same search only filter conditions are different.
How to create a base search for prebuilt panels
I WISH there was a way to create a prebuilt panel and reference its Search ID in additional panels, but I don't believe it is possible.
You can create a report and reference the same report in multiple prebuilt and inlined panels.
@premranjithj you can create a pre-built panel with search that you need to re-use for all existing pre-built panels. The new pre-built panel with search can be added to existing dashboard where other existing pre-built panels are present and then the row that contains pre-built panel can be hidden using depends attribute to check against a token which is never set.
For ex: <row depends="$alwaysHidePreBuiltPanelWithBaseSearch$">
@niketnilay . but i am not expecting this behavior to have a hidden panel.. thanks for your reply
So the above should work... right?
Saving a prebuilt panel with a search with an ID works fine. However, I am not able to reference the base search in any other panels. The search
does not support a ref
.
<panel ref="base_foobar"></panel>
<panel>
<event>
<title>child panel</title>
<search base="foobar_search_id" >
</search>
</event>
</panel>
hi @premranjithj
have a look into this link :
https://answers.splunk.com/answers/544338/howwhere-to-edit-a-prebuilt-panel.html