How do I see all logs in a 1 minute time frame?

philrego · ‎10-01-2019

I need to see all the logs at 9:12AM.
Splunk is only showing me 1000 results.
I need to see all the logs at 9:12AM there's nothing further I can filter.

How do I do this? Why can't I see all my results by default?

cmerriman · ‎10-01-2019

what is your search?

How do I see all logs in a 1 minute time frame?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Thanks for the Memories: .conf26 Took Learning to New Heights

Best Practices: Splunk auto adjust pipeline queue

Splunk Auto Ingestion Parallel Pipeline Scaling

Join the Conversation

How do I see all logs in a 1 minute time frame?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Thanks for the Memories: .conf26 Took Learning to New Heights

Best Practices: Splunk auto adjust pipeline queue

Splunk Auto Ingestion Parallel Pipeline Scaling