See Edit dashboards and Edit visualizations to learn more about editing panel visualizations.For more details on panel searches, see Searches power dashboards and forms.To learn about using the dashboard editor to add or edit dashboard panels, see Add panels to dashboards.Edit the panel directly to change the title, search, or visualizations in it. You can display a prebuilt panel in a dashboard by using a reference to the panel. Save and reuse Simple XML panels in multiple dashboards. Instead, it shows results for the currently running real-time scheduled report. It does not launch a new report instance each time a user loads the dashboard. This report type runs in the background at all times. To show dashboard users the most current results, back dashboard panels with real-time scheduled reports. Panels backed by scheduled reports show results from the last scheduled run of the report. Scheduled reports do not require the search to run each time a user loads the dashboard. For example, If fifty users access a particular dashboard, panels not backed by scheduled reports cause their reports to rerun fifty times. Not using scheduled reports can impact search processing loads and concurrent search limits. Use scheduled reports for dashboard panels when possibleīack dashboard panels with scheduled reports whenever possible to reduce search processing load for your Splunk deployment. When the report runs, it counts against the concurrent search limit of the user loading the dashboard, not the report owner. If the report accesses data that the current user does not have permission to see, the panel does not render those results. Scheduled reports cannot run with user permissions.
Run the report with the permissions of the user viewing the dashboard. When the limit is reached, the report scheduler causes additional report search runs to be queued for later execution.ĭashboard users might see slower panel loading and the report owner might not be able to run searches and reports immediately.
If a dashboard containing a report-backed panel loads multiple times simultaneously, it can impact the report owner's concurrent search limit. In other cases, you might want to restrict search result visibility. In some cases, you might want to provide this kind of access. Scheduled reports always run using report owner permissions.Ī report run with owner permissions renders search results that some users might not otherwise have permission to see. Run the report using the permissions of the user who created the report. These settings can affect data visibility and concurrent search limits. Reports in dashboard panels can run as the report owner or the report user. You can also change the report permissions. For instance, depending on your permissions, you can control whether the report is accelerated, scheduled, or embedded. If the report search changes, the panel using that report updates accordingly.ĭepending on your deployment, you might need to adjust report configurations for dashboard performance and access. When using a panel from a report, you cannot modify the search string in the panel, but you can change and configure the visualization. This panel type uses the saved search and visualization from a report. You can edit an inline search using the dashboard editor. The search generates the results rendered in the panel visualization. Select a panel type depending on the type of search behavior and configuration options that you want.Īn inline panel contains a search directly in its source code. Dashboard panels use searches to generate visualizations.
0 kommentar(er)
