Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Can realtime search report can be saved?

$
0
0

I created a dashboard including a realtime timechart.

<module name="GenericHeader" layoutpanel="panel_row1_col1" autorun="True"> <param name="label">My real time search</param>

<module name="HiddenSearch" autoRun="True">
    <param name="search">index="foo" sourcetype="foo" | timechart  span=5m count as PV</param>
    <param name="earliest">rt-24h</param>
    <param name="latest">rt</param>

      <module name="EnablePreview">
        <param name="enable">true</param>
        <param name="display">false</param>

          <module name="HiddenChartFormatter">
            <param name="chart">line</param>
            <param name="primaryAxisTitle.text">Time</param>
            <param name="chart.stackMode">default</param>
            <param name="secondaryAxisTitle.text">Count</param>

              <module name="FlashChart">
                <param name="width">100%</param>
                <param name="height">250px</param>
              </module>

              <module name="ViewRedirectorLink">
                <param name="viewTarget">flashtimeline</param>
                <param name="label">View results</param>
              </module>

           </module>
        </module>
  </module>
</module>

Because the data crosses 24h and is big, every time I open the dashboard, the chart will reload completely. That will take a long long long time to finish. My question is whether the realtime search result can be saved so that I can view the report immediately if I open the dashboard?


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>