topic Re: Searches in Splunk Search

Searches

whitecat001 — Thu, 16 May 2024 15:57:34 GMT

Can i get a query that will find searches that users are running in splunk

Re: Searches

gcusello — Thu, 16 May 2024 16:01:30 GMT

Hi @whitecat001 ,

do you want the list of savedsearches, the list or runned searches or what else?
could you better detail your request?

Ciao.

Giuseppe

Re: Searches

whitecat001 — Thu, 16 May 2024 16:07:08 GMT

I want to know how much volume of index is used for splunk searches

Re: Searches

gcusello — Thu, 16 May 2024 16:09:16 GMT

Hi @whitecat001,

sorry, it isn't so clear:

do you want the amount of data of each search or to know which indexes are used in each search or what else?

Ciao.

Giuseppe

Re: Searches

whitecat001 — Thu, 16 May 2024 16:13:58 GMT

I want to know the total volume of indexes used for splunk searches. Query on information that has to do with how much indexes are used based on splunk searches

Re: Searches

whitecat001 — Thu, 16 May 2024 16:15:20 GMT

what indexes are used the most in splunk searches

Re: Searches

isoutamo — Thu, 16 May 2024 19:50:21 GMT

this is quite often asked question. You could find answers from community by google.

But shortly, you couldn’t find that information from splunk audit logs. Here is couple links to tell more about the reason.

r. Ismo