<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How can I save a query data so that it does not get loaded everytime in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-can-I-save-a-query-data-so-that-it-does-not-get-loaded/m-p/140146#M38652</link>
    <description>&lt;P&gt;Musskopf's comment is a good suggestion.  You might also consider saving the query resuls in a summary index and pulling from the index to load the page.&lt;/P&gt;</description>
    <pubDate>Mon, 14 Jul 2014 12:26:34 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2014-07-14T12:26:34Z</dc:date>
    <item>
      <title>How can I save a query data so that it does not get loaded everytime</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-can-I-save-a-query-data-so-that-it-does-not-get-loaded/m-p/140144#M38650</link>
      <description>&lt;P&gt;I would like to save a query result, for example: for a particular month. I don't want splunk to load the page and fetch the data everytime the page is loaded.&lt;/P&gt;

&lt;P&gt;I need to get the results saved so that I can see the results instantaneously.Similar to canned report.&lt;/P&gt;</description>
      <pubDate>Sun, 13 Jul 2014 07:40:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-can-I-save-a-query-data-so-that-it-does-not-get-loaded/m-p/140144#M38650</guid>
      <dc:creator>webnair</dc:creator>
      <dc:date>2014-07-13T07:40:46Z</dc:date>
    </item>
    <item>
      <title>Re: How can I save a query data so that it does not get loaded everytime</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-can-I-save-a-query-data-so-that-it-does-not-get-loaded/m-p/140145#M38651</link>
      <description>&lt;P&gt;You'll need to save your search as a report and schedule the report to run. Once it ran at least once, use the command " |loadjob "admin:search:report_name" " to get the results...&lt;/P&gt;</description>
      <pubDate>Mon, 14 Jul 2014 01:09:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-can-I-save-a-query-data-so-that-it-does-not-get-loaded/m-p/140145#M38651</guid>
      <dc:creator>musskopf</dc:creator>
      <dc:date>2014-07-14T01:09:35Z</dc:date>
    </item>
    <item>
      <title>Re: How can I save a query data so that it does not get loaded everytime</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-can-I-save-a-query-data-so-that-it-does-not-get-loaded/m-p/140146#M38652</link>
      <description>&lt;P&gt;Musskopf's comment is a good suggestion.  You might also consider saving the query resuls in a summary index and pulling from the index to load the page.&lt;/P&gt;</description>
      <pubDate>Mon, 14 Jul 2014 12:26:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-can-I-save-a-query-data-so-that-it-does-not-get-loaded/m-p/140146#M38652</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2014-07-14T12:26:34Z</dc:date>
    </item>
    <item>
      <title>Re: How can I save a query data so that it does not get loaded everytime</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-can-I-save-a-query-data-so-that-it-does-not-get-loaded/m-p/140147#M38653</link>
      <description>&lt;P&gt;You could schedule your search to run once a month and output to a CSV.  Subsequent searches can pull the data from the monthly CSV.&lt;/P&gt;</description>
      <pubDate>Tue, 15 Jul 2014 12:31:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-can-I-save-a-query-data-so-that-it-does-not-get-loaded/m-p/140147#M38653</guid>
      <dc:creator>jimodonald</dc:creator>
      <dc:date>2014-07-15T12:31:44Z</dc:date>
    </item>
  </channel>
</rss>

