https://community.splunk.com/t5/Splunk-Search/Search-within-last-5-minutes/m-p/68389#M17123 <P>Please help I am trying to make a search for a string in the past five minutes and if there are over 100 I want an email alert.</P> <P>Many Thanks!</P> Mon, 11 Oct 2010 22:53:39 GMT Infinity8 2010-10-11T22:53:39Z https://community.splunk.com/t5/Splunk-Search/Search-within-last-5-minutes/m-p/68389#M17123 <P>Please help I am trying to make a search for a string in the past five minutes and if there are over 100 I want an email alert.</P> <P>Many Thanks!</P> Mon, 11 Oct 2010 22:53:39 GMT https://community.splunk.com/t5/Splunk-Search/Search-within-last-5-minutes/m-p/68389#M17123 Infinity8 2010-10-11T22:53:39Z https://community.splunk.com/t5/Splunk-Search/Search-within-last-5-minutes/m-p/68390#M17124 <P>What type of information are you looking for? What does your data look like? </P> <P>Searches are pretty basic - figure out what you want to look for, save it and set up an alert.</P> <P>Taking a look at <A href="http://www.splunk.com/base/Documentation/latest/User/AboutSearch" rel="nofollow">http://www.splunk.com/base/Documentation/latest/User/AboutSearch</A> and <A href="http://www.splunk.com/base/Documentation/latest/User/MonitoringRecurringSituations" rel="nofollow">http://www.splunk.com/base/Documentation/latest/User/MonitoringRecurringSituations</A> for some more information..</P> Mon, 11 Oct 2010 22:57:49 GMT https://community.splunk.com/t5/Splunk-Search/Search-within-last-5-minutes/m-p/68390#M17124 Brian_Osburn 2010-10-11T22:57:49Z https://community.splunk.com/t5/Splunk-Search/Search-within-last-5-minutes/m-p/68391#M17125 <P>The docs Brian reference are good places to start. </P> Mon, 11 Oct 2010 23:02:33 GMT https://community.splunk.com/t5/Splunk-Search/Search-within-last-5-minutes/m-p/68391#M17125 snowmizer 2010-10-11T23:02:33Z