<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: how to view the list of search queries run for a given time in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/how-to-view-the-list-of-search-queries-run-for-a-given-time/m-p/171287#M49046</link>
    <description>&lt;P&gt;The search for audit should give the data you want. For more formatted answer, refer to @Mus answer here. &lt;A href="http://answers.splunk.com/answers/151378/history-command-is-not-showing-the-searches-run-by-all-the-user-on-splunk-server"&gt;http://answers.splunk.com/answers/151378/history-command-is-not-showing-the-searches-run-by-all-the-user-on-splunk-server&lt;/A&gt;&lt;/P&gt;</description>
    <pubDate>Mon, 18 Aug 2014 13:29:05 GMT</pubDate>
    <dc:creator>somesoni2</dc:creator>
    <dc:date>2014-08-18T13:29:05Z</dc:date>
    <item>
      <title>how to view the list of search queries run for a given time</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-view-the-list-of-search-queries-run-for-a-given-time/m-p/171284#M49043</link>
      <description>&lt;P&gt;I work in a shared splunk environment where any one can run splunk query. I want to see all the queries run in splunk environment for any given time. one idea is to look inside the _audite of Splunk. Can anyone help me to sort it out.&lt;/P&gt;</description>
      <pubDate>Tue, 05 Aug 2014 15:48:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-view-the-list-of-search-queries-run-for-a-given-time/m-p/171284#M49043</guid>
      <dc:creator>ashari</dc:creator>
      <dc:date>2014-08-05T15:48:23Z</dc:date>
    </item>
    <item>
      <title>Re: how to view the list of search queries run for a given time</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-view-the-list-of-search-queries-run-for-a-given-time/m-p/171285#M49044</link>
      <description>&lt;P&gt;See the history command.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;|history 
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Also see this (user queries)&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=_audit action="search" search=* NOT user="splunk-system-user"
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 05 Aug 2014 15:55:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-view-the-list-of-search-queries-run-for-a-given-time/m-p/171285#M49044</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-08-05T15:55:50Z</dc:date>
    </item>
    <item>
      <title>Re: how to view the list of search queries run for a given time</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-view-the-list-of-search-queries-run-for-a-given-time/m-p/171286#M49045</link>
      <description>&lt;P&gt;Thanks it works, but as I said I work in a shared environment and history command dont show me the commands of other people that they have run on splunk. I can only see the commands that I have run on splunk. I have got the administration privillages on Splunk.&lt;/P&gt;</description>
      <pubDate>Mon, 18 Aug 2014 09:59:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-view-the-list-of-search-queries-run-for-a-given-time/m-p/171286#M49045</guid>
      <dc:creator>ashari</dc:creator>
      <dc:date>2014-08-18T09:59:20Z</dc:date>
    </item>
    <item>
      <title>Re: how to view the list of search queries run for a given time</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-view-the-list-of-search-queries-run-for-a-given-time/m-p/171287#M49046</link>
      <description>&lt;P&gt;The search for audit should give the data you want. For more formatted answer, refer to @Mus answer here. &lt;A href="http://answers.splunk.com/answers/151378/history-command-is-not-showing-the-searches-run-by-all-the-user-on-splunk-server"&gt;http://answers.splunk.com/answers/151378/history-command-is-not-showing-the-searches-run-by-all-the-user-on-splunk-server&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 18 Aug 2014 13:29:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-view-the-list-of-search-queries-run-for-a-given-time/m-p/171287#M49046</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-08-18T13:29:05Z</dc:date>
    </item>
  </channel>
</rss>

