Report referenced panels
The panels start to increase the efficiency of Splunk's visualizations considerably, and the reason is quite simple. A scheduled report is held in cache memory, and that data can then be referenced by search panels in order to streamline your user experience. A report is little more than a saved search that is scheduled to run at specific intervals; because that report continues to refresh its result set, the panels that reference that data can display those results that much faster.
I will be referencing the examples used in the Splunk 6.x Dashboard Examples, so for future referencing please feel free to check out that app.
Let's use our same dashboard example to explore how this will work. I am going to ask you to use ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access