Special notes

Keep in mind that, with both the report-driven dashboard panels and the data model/pivot-driven dashboard panels, making them use tokens is possible; however, it takes some massaging of the syntax.

The techniques in this chapter can be applied to any dashboard that is leveraging simplified XML, which most dashboards on Splunkbase use. If you already have an app installed that is experiencing some performance issues, try one of these techniques to see if you can improve the performance for your users.

Get Splunk Best Practices now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.