Improving Splunk Dashboard Performance Using Base Searches

Please refer to the link below to get part 1 of this video where we detail how to create the user input and tokens used in this dashboard

   • Splunk Dashboards and How to Use User...  

Each Splunk dashboard panel could be making your Splunk instance have to perform a separate search. Before long, a great dashboard no longer provides a responsive for users. Base Searches are a way of creating one query and having all of the panels use the results from that query, fill out the rest of the dashboard panels.

00:00 - Splash Screen
00:11 - Introduction
00:30 - Add pie chart
02:22 - Add a bar chart
03:50 - Splunk needs multiple queries to run to display dashboard
04:17 Introduction to Base Searches
05:58 Calling a Base Search in Dashboard Panel
08:52 Applying Base Search to last Panel
10:27 Applying Base Searches to Dashboard Inputs

Join this channel to get access to early release of videos and exclusive training videos that will help make you L.A.M.E. ninja:    / @lamecreations_guides  

Visit our discord channel to post questions and suggestions for what you want to learn.   / discord  

The latest L.A.M.E. Splunk apps are available at
https://www.github.com/lameCreations