- Splunk Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- How to get List of realtime searches and the macr...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am new to splunk...
How to get List of realtime searches and the macro/savedSearch that runs on it?
Is there any splunk query command or index from which i can get required information..
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi paramagurukarthikeyan,
try this from the search bar:
| rest /services/search/jobs | search eventSorting=realtime
cheers, MuS
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
| rest /servicesNS/-/-/search/jobs splunk_server=local | search eventSorting=realtime
Works for me in Splunk 6.5
| rest /servicesNS/-/-/search/jobs | search eventSorting=realtime
Works for me on Splunk 6.5
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi paramagurukarthikeyan,
try this from the search bar:
| rest /services/search/jobs | search eventSorting=realtime
cheers, MuS
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Anyone know how to do this on the latest version of Splunk 6.x?
This doesn't appear to work anymore.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @phoenixdigital, what exactly are you after? The REST call still works in 6.4.1
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I was trying to get a list of all saved searches that would use a realtime search.
Maybe because I am using a clustered search head the results are not consistent.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you Michael... This is what i was looking for 🙂
Extending Observability Content to Splunk Cloud
More Control Over Your Monitoring Costs with Archived Metrics!
New in Observability Cloud - Explicit Bucket Histograms
