Dashboards & Visualizations

How to create a search that will generate the amount of splunk events in a month?

Ghanayem1974
Path Finder

I want to add the number of events generated monthly to a dashboard. Any ideas on the search criteria needed for this request?

0 Karma

Ghanayem1974
Path Finder

actually i apologize i wrote the question wrong, we use Enterprise Security -> Incident Review and i want to get the number of fired events for the month that i can add to my dashboard. hope this makes sense.

0 Karma

xpac
SplunkTrust
SplunkTrust

Hey, try this:

| tstats count where index=* OR index=_*

0 Karma

Ghanayem1974
Path Finder

actually i apologize i wrote the question wrong, we use Enterprise Security -> Incident Review and i want to get the number of fired events for the month that i can add to my dashboard. hope this makes sense.

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!