Learning Splunk Web Framework

Using scheduled reports in dashboards

Post processing searches are not the only way we can speed up the display of data in our Splunk App. We can also use a scheduled report to provide data for the interface we are creating. Using a scheduled report, we also work around some of the limitations that are put in place when using post processing searches, and with large data sets we can run our report once a week and ensure that the data is present before users need to view it.

In our example, we are going to create a new dashboard using a scheduled search. We are hoping to establish that as the generations of cell growth continue, there is a chance that the number of cells that we see will be reduced. We can start by creating our saved search in our ...