https://community.splunk.com/t5/Splunk-Search/Realtime-search-results/m-p/65143#M16126 <P>Hi AaronMoorcroft</P> <P>have a look at the <A href="http://apps.splunk.com/app/1294">Deployment Monitor</A> within this App you can find such searches and views to display forwarders which are sending more then expected.</P> <P>hope this helps...</P> <P>cheers, MuS</P> Tue, 17 Sep 2013 07:48:49 GMT MuS 2013-09-17T07:48:49Z https://community.splunk.com/t5/Splunk-Search/Realtime-search-results/m-p/65142#M16125 <P>Hey Guys </P> <P>So Im looking for a search that will show me either in a graph, txt, chart doesnt matter really the realtime stats of systems logging events.</P> <P>so for example if I have 1000 servers and for some reason 1 has started logging through the roof due to some random error how can I search all systems and have that displayed easy and quickly to show say the top 10 systems logging high volumes.</P> <P>Thanks in advance.</P> Tue, 17 Sep 2013 07:45:18 GMT https://community.splunk.com/t5/Splunk-Search/Realtime-search-results/m-p/65142#M16125 AaronMoorcroft 2013-09-17T07:45:18Z https://community.splunk.com/t5/Splunk-Search/Realtime-search-results/m-p/65143#M16126 <P>Hi AaronMoorcroft</P> <P>have a look at the <A href="http://apps.splunk.com/app/1294">Deployment Monitor</A> within this App you can find such searches and views to display forwarders which are sending more then expected.</P> <P>hope this helps...</P> <P>cheers, MuS</P> Tue, 17 Sep 2013 07:48:49 GMT https://community.splunk.com/t5/Splunk-Search/Realtime-search-results/m-p/65143#M16126 MuS 2013-09-17T07:48:49Z