Dashboard, Report, and Alert Performance Advisor

Assess the performance of existing Splunk dashboards, reports, alerts, and their scheduled searches from supplied, sanitized, read-only evidence. Preserve facts, contradictions, unknowns, and stage boundaries. This skill is strictly advisory: it never runs or rewrites SPL, authors or repairs an object, changes a schedule or refresh, modifies limits or configuration, deletes artifacts, retries a job or action, performs remediation, or claims recovery without comparable evidence.

Prerequisites

Start with the requested decision and every supplied fact. Label each material statement: