Search icon
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Splunk Best Practices

You're reading from  Splunk Best Practices

Product type Book
Published in Sep 2016
Publisher Packt
ISBN-13 9781785281396
Pages 244 pages
Edition 1st Edition
Languages

Types of dashboard search panel


In Splunk, each panel within a dashboard can be one of a series of types. Designing your dashboard virtually before you implement it, leveraging some of these panels, is very helpful in creating optimized performance. The architecture of your dashboard and which search queries you decide to use directly relate to the performance of your dashboard.

Raw data search panel

This is a search panel with a single query in it that searches raw data each time the dashboard loads. This is usually the fastest way of creating dashboards; however, the more of these panels you add to your dashboard, the slower the performance.

Shared search panel (base search)

These are also sometimes referred to as post-process panels. These panels reference a single root search hidden within the XML source code of the page and then perform a function such as stats or timechart on the results. This assists performance by allowing the dashboard to load by running only a single search to populate...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $15.99/month. Cancel anytime}