https://community.splunk.com/t5/Security/Differences-in-splunk-documentation/m-p/128787#M14541 <P>I tried with unit as 'm' and it seems to be working</P> Fri, 11 Apr 2014 22:27:20 GMT strive 2014-04-11T22:27:20Z https://community.splunk.com/t5/Security/Differences-in-splunk-documentation/m-p/128785#M14539 <P>Hi,</P> <P>We use splunk's scripted authentication mechanism in our product. Initially we set the cachetiming to 1s. Since its adding lot of load on the system, we wanted to increase the polling time intervals to 10 min. While going through the documentation i noticed that for setting time in minutes its given as </P> <OL> <LI><P>min(s) in <A href="http://docs.splunk.com/Documentation/Splunk/6.0.3/Admin/Authenticationconf">http://docs.splunk.com/Documentation/Splunk/6.0.3/Admin/Authenticationconf</A> </P></LI> <LI><P>m in <A href="http://docs.splunk.com/Documentation/Splunk/6.1.2/Security/Editauthenticationconf">http://docs.splunk.com/Documentation/Splunk/6.1.2/Security/Editauthenticationconf</A></P></LI> </OL> <P>Which one is right?</P> <P>Thanks<BR /><BR /> Strive</P> Fri, 11 Apr 2014 12:10:37 GMT https://community.splunk.com/t5/Security/Differences-in-splunk-documentation/m-p/128785#M14539 strive 2014-04-11T12:10:37Z https://community.splunk.com/t5/Security/Differences-in-splunk-documentation/m-p/128786#M14540 <P>These searches are equivalent:</P> <PRE><CODE>index=_internal earliest=-15m latest=now index=_internal earliest=-15min latest=now index=_internal earliest=-15mins latest=now index=_internal earliest=-15minute latest=now index=_internal earliest=-15minutes latest=now </CODE></PRE> <P>So I assume the configuration might work the same in accepting all five ways of expression the minute unit.</P> Fri, 11 Apr 2014 12:34:45 GMT https://community.splunk.com/t5/Security/Differences-in-splunk-documentation/m-p/128786#M14540 martin_mueller 2014-04-11T12:34:45Z https://community.splunk.com/t5/Security/Differences-in-splunk-documentation/m-p/128787#M14541 <P>I tried with unit as 'm' and it seems to be working</P> Fri, 11 Apr 2014 22:27:20 GMT https://community.splunk.com/t5/Security/Differences-in-splunk-documentation/m-p/128787#M14541 strive 2014-04-11T22:27:20Z