When there are more than 10 pages of results, showing the Prev / Next buttons, is there a way to go to the last page of the result set without clicking over and over? We're on Splunk v7.3.1.
Hi @donna_oquinn
I am not sure if there is any facility to do that.
But with tail command you can get the last results on last page as needed.
As events are ordered by _time, and Tail command goes in reverse order
index=_internal | tail 10
Thanks
Actually the results of the search aren't time driven. They are based on filters used against a base search. So with less filters there could be more pages of results.
what ever the search may be, finally the results are ordered according to what time they have been received to Splunk. tail command should work for you, if you want to view those last events.