Hi,
I have a scheduled report in Splunk that runs nightly. It is accelerated for 7 days and runs back in time for 7 days also.
This report provides me comprehensive information about all my assets and respective information.
Report has about 10 million statistical records for our assets as we need.
When I reference my dashboard panels using this report, they error out complaining about "error fetching data" and it seems like it a huge data set thats why because it is fine with smaller data set. But when I open report as normal in reports, it loads in less than 5 seconds.
I need to know if I add report in dashboard as table which I do BUT is it possible to add drop down filter menus to parse information from that huge report table or even report by itself? OR how to have dashboard panels load quicker digging thru this large report?
Report contents example:
Host, Barcode, Company, BusinessUnit, Location, ContactPerson
I want filters for Company, BusinessUnit, Location, ContactPerson so I can list Host, Barcode information associated with the selection from this huge data.
Thanks in-advance.
↧