https://community.splunk.com/t5/Splunk-Search/total-concurrent-searches/m-p/197065#M187380 <P>thanks for the reply, I cannot seem to see sourcetype="searches" though i can see the sourcetype="scheduler".</P> Wed, 08 Jan 2014 03:00:27 GMT d646800 2014-01-08T03:00:27Z https://community.splunk.com/t5/Splunk-Search/total-concurrent-searches/m-p/197062#M187377 <P>can anyone let me know how to find the total concurrent searches in splunk for example in the last few days etc and the details of the search</P> <P>i was doing this<BR /> index=_internal source=*metrics.log group="search_concurrency" host=A | timechart span=1m sum(active_hist_searches) as concurrent_searches by host</P> <P>but i cannot see the type of searches or the search string etc in it. is there a way to find it out</P> Mon, 28 Sep 2020 15:35:33 GMT https://community.splunk.com/t5/Splunk-Search/total-concurrent-searches/m-p/197062#M187377 d646800 2020-09-28T15:35:33Z https://community.splunk.com/t5/Splunk-Search/total-concurrent-searches/m-p/197063#M187378 <P>You could probably accomplish your goal, using Splunk internal information. The running jobs are normally tracked by Splunk as follows:</P> <P>Saved Searches: index="_internal" sourcetype="scheduler" earliest=02/05/2011:12:20:00 latest=02/05/2011:12:25:00 <BR /><BR /> Manual Searches: index="_internal" sourcetype="searches" earliest=02/05/2011:12:20:00 latest=02/05/2011:12:35:00</P> Mon, 28 Sep 2020 15:35:42 GMT https://community.splunk.com/t5/Splunk-Search/total-concurrent-searches/m-p/197063#M187378 chimbudp 2020-09-28T15:35:42Z https://community.splunk.com/t5/Splunk-Search/total-concurrent-searches/m-p/197064#M187379 <P>For more answers :<BR /> <A href="http://answers.splunk.com/answers/11267/splunk-search-to-get-number-of-concurrent-searches-running-on-the-system">http://answers.splunk.com/answers/11267/splunk-search-to-get-number-of-concurrent-searches-running-on-the-system</A></P> Tue, 07 Jan 2014 08:34:01 GMT https://community.splunk.com/t5/Splunk-Search/total-concurrent-searches/m-p/197064#M187379 chimbudp 2014-01-07T08:34:01Z https://community.splunk.com/t5/Splunk-Search/total-concurrent-searches/m-p/197065#M187380 <P>thanks for the reply, I cannot seem to see sourcetype="searches" though i can see the sourcetype="scheduler".</P> Wed, 08 Jan 2014 03:00:27 GMT https://community.splunk.com/t5/Splunk-Search/total-concurrent-searches/m-p/197065#M187380 d646800 2014-01-08T03:00:27Z