Alerting

Response when query is waiting in splunk cloud

nishida_tada_ca
Loves-to-Learn Lots

I am trying to output a csv by executing a lot of queries using the report function for splunk cloud.
At the same time, we are also using the alart function for operation monitoring, so we are studying how to respond if the query stays.
Is it possible to create a priority and suspend or delete low-priority query processing?
Sorry to trouble you, but thank you.

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...