How can i update the server information displayed on the S.o.S landing page under "A glimpse of your Splunk instance"? Additional hardware was added after the initial install.
There are two ways to do this:
sos_splunk_instances_info
" scheduled search to regenerate the "splunk_instances_info
" lookup table which holds this information.-- OR --
Force the regeneration of that lookup table by calling that saved search from the flashtimeline in the context of the S.o.S app, like so:
| savedsearch sos_splunk_instances_info
There are two ways to do this:
sos_splunk_instances_info
" scheduled search to regenerate the "splunk_instances_info
" lookup table which holds this information.-- OR --
Force the regeneration of that lookup table by calling that saved search from the flashtimeline in the context of the S.o.S app, like so:
| savedsearch sos_splunk_instances_info