Skip to main content

Dashboard Caching

Now that we've created this stunning dashboard we need to make sure that it is as performant as possible. It the visualizations that are supposed to allow us to make split-second decisions takes forever to load that kinda defeats the purpose right?.

Cribl Search provides many mechanisms for making quick-snappy dashboards. Some of these we have already covered such as using parent searches and saved searches. One of the biggest mechanism at your disposal will be caching.

The caching feature controls how often the data in the dashboard should be refreshed. Imagine you have multiple users viewing the same dashboard and one user opens the dashboard a minute after the another user. Resources would be wasted running every search in the dashboard the second time since the data is unlikely to have changed significantly in the last minute. Caching solves that problem by saving the results of the dashboard after the first run and simply retrieving the results if viewed again within the caching period.

Let's Make Some Cache
  1. While in Edit mode, click the settings settings icon icon next the the dashboard name at the top of the page.
  2. In the SBX Sample Dashboard row click the actions options icon icon to the far right.
  3. In the modal click the edit edit icon icon to the right of the dashboard name.
  4. Enable the Cache data for toggle and set the time to 1 Hour.
  5. Click Save.

Great, now our dashboard will only run new searches once per hour.

tip

Think of the nature of the data that you are representing in your dashboard and set the cache accordingly. The more that data is likely to change significantly, the shorter the cache period should be set to ensure the data presented is relevant.

tip

If a cache is set and you would like to ensure you are receiving relevant results you can manually clear the cache and re-run the search.

  1. While not in edit mode, click the options options icon on the dashboard or any individual panel.
  2. Click Clear Cache and Refresh.