Hi ,
I need to know in realtime time frame option, is there any option to get refresh splunk in less than 30 seconds..like refresh the reports or dashboards at every 5 seconds?
And for a third option what you may want to do is just reload the contents of a panel (searches, charting etc) without refreshing the page. To do that then have a look here;
Hello
There are two different concepts, the real time window, you can choose to see the last 30 seconds of data, and the refresh rate of the dashboard, I think you are asking for the second one, and you can set up it this way:
Edit the view, and in the basic xml add this to the
Where 5 is the number of second to refresh the dashboard
Regards
If that is what you need, than you should just use the real time search option for those dashboards.
http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/RealTimeDashboard