-
Book Overview & Buying
-
Table Of Contents
Learning Splunk Web Framework
By :
Post processing searches are not the only way we can speed up the display of data in our Splunk App. We can also use a scheduled report to provide data for the interface we are creating. Using a scheduled report, we also work around some of the limitations that are put in place when using post processing searches, and with large data sets we can run our report once a week and ensure that the data is present before users need to view it.
In our example, we are going to create a new dashboard using a scheduled search. We are hoping to establish that as the generations of cell growth continue, there is a chance that the number of cells that we see will be reduced. We can start by creating our saved search in our Cell Biology Splunk App and we can then create the new dashboard:
Log in to your development server and change to the default directory of your Splunk App:
cd $SPLUNK_HOME/etc/apps/cell_biology/default/
We are going to create a new file in this...