Knowledge Management

Eventstats not working in saved search?

patricianaguit
Explorer

I tried running my query on normal search the eventstats is populating values. But when i tried to run it on my saved search the eventstats isnt populating any values..

Do you have any idea why? And what are the alternatives for this?

I have like 3m of data..

Thank you for your help

0 Karma
Get Updates on the Splunk Community!

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...