Dashboards & Visualizations

User limit events

pbarbuto
Path Finder

Is there a way to tell which users are hitting their search limits? I've looked for these events in the internal indexes but cant find them. Maybe a rest search?

Labels (1)
Tags (1)
0 Karma
1 Solution

anilchaithu
Builder

@pbarbuto 

Please use the below search. you should be able to see the reached limit messages for both user & role assuming someone is hitting the limit.

index=_internal sourcetype=splunkd component=DispatchManager

 

-- Hope this helps.

 

View solution in original post

0 Karma

anilchaithu
Builder

@pbarbuto 

Please use the below search. you should be able to see the reached limit messages for both user & role assuming someone is hitting the limit.

index=_internal sourcetype=splunkd component=DispatchManager

 

-- Hope this helps.

 

View solution in original post

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!