- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
thisissplunk
Builder
07-20-2016
02:14 PM
When I use the cluster command in its simplest form to a complicated query, it returns 0 results. I have no idea how to go about troubleshooting this. The index and sourcetype I'm using definitely has plenty of events in it. Nothing I've tried has worked.
How do I tell if the command is still a thing? How do I tell if it's running in my query but just not returning anything... etc.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
thisissplunk
Builder
07-20-2016
02:21 PM
I have no idea what was happening, but the same exact query is returning results now.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
thisissplunk
Builder
07-20-2016
02:21 PM
I have no idea what was happening, but the same exact query is returning results now.
