https://community.splunk.com/t5/Monitoring-Splunk/Saved-Search-Pre-Flight-Check/m-p/25748#M286 <P>Is there a way to look at a Splunk Search and check it for common issues that might cause the search to run long in advance of setting up the Search and seeing how it performs?</P> <P>The process at <A href="http://wiki.splunk.com/Deploy:SearchPerformance">http://wiki.splunk.com/Deploy:SearchPerformance</A> outlines how to troubleshoot an existing bad search, but I am looking for an more automated way to call out issues prior to scheduling on the server. Looking to empower users to create their own searches, but need to ensure that they have not built the search in a way that won't scale.</P> <P>Has anyone automated this check, and if so, how? If not, are there a more detailed set of steps other than the above that we could use as a starting point for a preflight check?</P> <P>Any help is much appreciated. Thanks!</P> Fri, 08 Feb 2013 20:22:08 GMT sambosplunk 2013-02-08T20:22:08Z https://community.splunk.com/t5/Monitoring-Splunk/Saved-Search-Pre-Flight-Check/m-p/25748#M286 <P>Is there a way to look at a Splunk Search and check it for common issues that might cause the search to run long in advance of setting up the Search and seeing how it performs?</P> <P>The process at <A href="http://wiki.splunk.com/Deploy:SearchPerformance">http://wiki.splunk.com/Deploy:SearchPerformance</A> outlines how to troubleshoot an existing bad search, but I am looking for an more automated way to call out issues prior to scheduling on the server. Looking to empower users to create their own searches, but need to ensure that they have not built the search in a way that won't scale.</P> <P>Has anyone automated this check, and if so, how? If not, are there a more detailed set of steps other than the above that we could use as a starting point for a preflight check?</P> <P>Any help is much appreciated. Thanks!</P> Fri, 08 Feb 2013 20:22:08 GMT https://community.splunk.com/t5/Monitoring-Splunk/Saved-Search-Pre-Flight-Check/m-p/25748#M286 sambosplunk 2013-02-08T20:22:08Z https://community.splunk.com/t5/Monitoring-Splunk/Saved-Search-Pre-Flight-Check/m-p/25749#M287 <P>The <A href="http://splunk-base.splunk.com/apps/24070/sanity-check-my-splunk">Sanity Checking App</A> should help you out here. It uses Splunk's REST API to get information about Splunk saved searches.</P> Tue, 12 Feb 2013 00:01:44 GMT https://community.splunk.com/t5/Monitoring-Splunk/Saved-Search-Pre-Flight-Check/m-p/25749#M287 dart 2013-02-12T00:01:44Z