Dashboards & Visualizations

running saved searches on a different server

Splunk Employee
Splunk Employee

Is it possible to run resource intensive saved/scheduled searches on another splunk instance and have the ability to use them on the splunk search head for dashboards?

0 Karma

Splunk Employee
Splunk Employee

Yes. Configure the other splunk instance as a jobs server. You will also need to enable pooling.

Jobs Server

0 Karma

Influencer

Is it not something that can be put into a summary index?

0 Karma