How do I auto-refresh a panel in Splunk Enterprise 8.0.0? I tried the refresh.auto.interval option but it's already deprecated. Tried the refresh attribute too but it seems that it only applies on the whole dashboard and not the individual panel.
Hi
Check this
<dashboard>
<label>autorefresh</label>
<row>
<panel>
<table>
<search>
<query>index=_internal |stats count by host</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<refresh>2s</refresh>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
<row>
<panel>
<table>
<search>
<query>index=_internal |stats count by sourcetype</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
</dashboard>
@lawrence_magpoc , the refresh.auto.interval
option has been deprecated from Splunk 6.5 and above. You should be using <refresh>
option as mentioned below by @vnravikumar
Refer to one of my older answers: https://answers.splunk.com/answers/551168/how-to-refresh-a-panel-values-based-on-input-token.html
Refer to documentation for details: https://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#search
You can also check out Splunk Dashboard Examples app from Splunkbase for examples on the same.
Hi
Check this
<dashboard>
<label>autorefresh</label>
<row>
<panel>
<table>
<search>
<query>index=_internal |stats count by host</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<refresh>2s</refresh>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
<row>
<panel>
<table>
<search>
<query>index=_internal |stats count by sourcetype</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
</dashboard>