Dashboards & Visualizations

How do I create a base search for prebuilt panels?

DataOrg
Builder

i have a 4 to 5 prebuilt panels in dashboard with same search only filter conditions are different.

How to create a base search for prebuilt panels

markbarber21
Path Finder

I WISH there was a way to create a prebuilt panel and reference its Search ID in additional panels, but I don't believe it is possible.

You can create a report and reference the same report in multiple prebuilt and inlined panels.

0 Karma

niketn
Legend

@premranjithj you can create a pre-built panel with search that you need to re-use for all existing pre-built panels. The new pre-built panel with search can be added to existing dashboard where other existing pre-built panels are present and then the row that contains pre-built panel can be hidden using depends attribute to check against a token which is never set.

For ex: <row depends="$alwaysHidePreBuiltPanelWithBaseSearch$">

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

DataOrg
Builder

@niketnilay . but i am not expecting this behavior to have a hidden panel.. thanks for your reply

0 Karma

niketn
Legend

So the above should work... right?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

markbarber21
Path Finder

Saving a prebuilt panel with a search with an ID works fine. However, I am not able to reference the base search in any other panels. The search does not support a ref.

    <panel ref="base_foobar"></panel>
    <panel>
      <event>
        <title>child panel</title>
        <search  base="foobar_search_id" >
        </search>
      </event>
    </panel>

harishalipaka
Motivator

hi @premranjithj

have a look into this link :

https://answers.splunk.com/answers/544338/howwhere-to-edit-a-prebuilt-panel.html

Thanks
Harish
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...