Dashboards & Visualizations

Why is auto refresh on my dashboard not working?

biec1
Explorer

This dashboard reads two lookup files and displays status based on the content of the files.
I want to auto refresh this dashboard every 30 seconds. But its not happening,
Please help. It works for other dashboards with table panel.

<dashboard refresh="30" stylesheet="custom_decorations.css">
 <label>Label1</label>
 <search>
<query>| inputlookup test1.csv | append [  inputlookup test1.csv ]|stats sum(final) as total_sum|  eval final_result = if(tonumber(total_sum)=0, 150, 550)                    
| eval value = final_result | rangemap field=value none=0-99 low=100-199 guarded=200-299 elevated=300-399 high=400-499 severe=500-599 default=none
</query>
<progress>
<set token="value1">$result.value$</set>
<set token="range1">$result.range$</set>
</progress>
</search>
<row>
<panel>

<title>Panel_1</title>
<html>
<div class="custom-result-value icon-only $range1$"> </div>
</html>
</panel>
</row>
</dashboard>
0 Karma

cmerriman
Super Champion

if you put the hidden search in a table does it work? just curious if it's a problem with it being hidden.

 <dashboard refresh="30" stylesheet="custom_decorations.css">
  <label>Label1</label>
 <row>
<panel>
<table>
 <search>
 <query>| inputlookup test1.csv | append [  inputlookup test1.csv ]|stats sum(final) as total_sum|  eval final_result = if(tonumber(total_sum)=0, 150, 550)                    
 | eval value = final_result | rangemap field=value none=0-99 low=100-199 guarded=200-299 elevated=300-399 high=400-499 severe=500-599 default=none
 </query>
 <progress>
 <set token="value1">$result.value$</set>
 <set token="range1">$result.range$</set>
 </progress>
 </search>
</table>
</panel>
</row>
 <row>
 <panel>

 <title>Panel_1</title>
 <html>
 <div class="custom-result-value icon-only $range1$"> </div>
 </html>
 </panel>
 </row>
 </dashboard>
0 Karma

rjthibod
Champion

What version of Splunk are you using?

0 Karma

rjthibod
Champion

What happens if you replace progress with done?

 <done>
 <set token="value1">$result.value$</set>
 <set token="range1">$result.range$</set>
 </done>
0 Karma

biec1
Explorer

Auto refresh still not happening in spite of replacing progress with done.

0 Karma

rjthibod
Champion

Also curious what happens if you use the new refresh option in the <search> element instead of the <dashboard> element.

  <search>
 <query>| inputlookup test1.csv | append [  inputlookup test1.csv ]|stats sum(final) as total_sum|  eval final_result = if(tonumber(total_sum)=0, 150, 550)                    
 | eval value = final_result | rangemap field=value none=0-99 low=100-199 guarded=200-299 elevated=300-399 high=400-499 severe=500-599 default=none
 </query>
 <progress>
 <set token="value1">$result.value$</set>
 <set token="range1">$result.range$</set>
 </progress>
 <refresh>30</refresh>
 </search>
0 Karma

biec1
Explorer

Thank you. Auto refresh working fine when i kept the div tag inside html table tag.
Refresh is happening beautifully without our knowledge.

I will try the refresh option inside search and update you.

0 Karma

rjthibod
Champion

If you put your hidden/global search in a table, do you see it updating with the refresh interval?

0 Karma

biec1
Explorer

Version is: 6.5.0

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...