Quantcast
Viewing all articles
Browse latest Browse all 47296

How do you set the order of queries to be run in a Splunk dashboard?

We have 2 different searches which are interrelated. 1st search is called through a macro which publishes its result into a lookup file. While 2nd search uses the data from the lookup file(result of macro) to get the desired result. Currently we are calling the macro in 1st panel, while the 2nd panel has the 2nd search. Issue: When we refresh the dashboard both the 1st and 2nd panel are running in parallel. Because of which, we are getting the desired result. Resolving requirement: When the dashboard is refreshed, 2nd panel must wait till the search query of 1st panel is complete.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>