Dashboards & Visualizations

onunloadCancelJobs--is this the default or not?


Just seen this very old Answer concerning the XML view template:


This would seem to imply that onunloadCancelJobs is the default behaviour (generated into the XML preamble), but the docs indicate there is no default setting. I do not know enough about how splunk does all this to figure it out.

I cannot find any other references except these two, apparently contradictory ones. Anybody on the inside care to clarify the actual situation? I'd like to know whether to add this rather useful property to all my views since I've only just found out about it.

Also, if it's not the default behaviour....why not?

Thank you,


Labels (2)
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!