Re: Save the same data

hhhwang · ‎09-05-2022

If I save the data, will it be updated if the same data is included? Or is there no change?

gcusello · ‎09-06-2022

could you better describe your requirement?

Ciao.

Giuseppe

hhhwang · ‎09-06-2022

1. The data storage schedule runs every 30 minutes.
2. The data lookup time is one hour.
3. Data overlaps for 30 minutes.

I wonder what happens to the 30 minute data overlapped here.

ITWhisperer · ‎09-06-2022

Which data exactly are you talking about?

If I save the data, will it be updated if the same data is included? Or is there no change?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Automating Threat Operations and Threat Hunting with Recorded Future

Keep the Learning Going with the New Best of .conf Hub

Splunk Community Badges!

Join the Conversation

If I save the data, will it be updated if the same data is included? Or is there no change?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Automating Threat Operations and Threat Hunting with Recorded Future

Keep the Learning Going with the New Best of .conf Hub

Splunk Community Badges!