If I save the data, will it be updated if the same...

hhhwang · ‎09-05-2022

If I save the data, will it be updated if the same data is included? Or is there no change?

gcusello · ‎09-06-2022

could you better describe your requirement?

Ciao.

Giuseppe

hhhwang · ‎09-06-2022

1. The data storage schedule runs every 30 minutes.
2. The data lookup time is one hour.
3. Data overlaps for 30 minutes.

I wonder what happens to the 30 minute data overlapped here.

ITWhisperer · ‎09-06-2022

Which data exactly are you talking about?

If I save the data, will it be updated if the same data is included? Or is there no change?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Join the Conversation

If I save the data, will it be updated if the same data is included? Or is there no change?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest