How can I run, repeat, then search?

ryuch2002 — Thu, 12 Nov 2015 07:03:05 GMT

Splunk Enterprise version: 6.3.1

earliest_time : "-5m",
latest_time:"now"
exec_mode:"blocking",
search : "index= xxxxx------------------------- very complex."

Currently my method like this javascript code:

            setTimeout(function(){
                console.log("start update search...");
                serviceStatus.startSearch();
            },10000);

for a 10 second result refresh.

Is there any better way?

Re: How can I run, repeat, then search?

fdi01 — Thu, 12 Nov 2015 07:40:15 GMT

use ALERT to do it.
http://docs.splunk.com/Documentation/Splunk/6.3.0/Alert/Definescheduledalerts

topic Re: How can I run, repeat, then search? in Splunk Search

How can I run, repeat, then search?

Re: How can I run, repeat, then search?