topic Re: Real-time query with click on table doesn't work? in Splunk Search

Real-time query with click on table doesn't work?

fpedrosa — Mon, 21 Nov 2022 20:09:23 GMT

Hello,

I have a table with a custom Splunk Query, and a custom Click on an Cell.. work fine if I select to filter any filter than "Real Time" . Using real time, this click doesn't work, appears to recreate the query every second, and when I click the action is not triggered.

How can I fix that?

Thanks

Re: Real-time query with click on table doesn't work?

gcusello — Tue, 22 Nov 2022 07:55:24 GMT

Hi @fpedrosa,

In general, avoid to use Real Time searches because they are very expensive in resource use, because a search takes a CPU and release it when finished, with a Reta Time search the CPU isn't released.

You can schedule a panel's refresh e.g. every minute having the same result.

Ciao.

Giuseppe