All Apps and Add-ons

Why does ES Content Updates search for itself as ESCU?

Motivator

I see the following in this app -

alt text

The search query is -

| rest /services/saved/searches splunk_server=local count=0
                | search title="ESCU - *" | rename action.escu.search_type AS search_type
                | eval search_type = upper(substr(search_type,1,1)) + lower(substr(search_type,2))
                | stats count by search_type

What is it doing exactly? I guess it monitors itself ...

0 Karma
1 Solution

SplunkTrust
SplunkTrust

Hi,

That search is providing how many different searches are available in ESCU app with different search types.

View solution in original post

SplunkTrust
SplunkTrust

Hi,

That search is providing how many different searches are available in ESCU app with different search types.

View solution in original post