Knowledge Management

how to update a search dynamically if i change lookup kv store ?

sfatnass
Contributor

hi,

i have some experience with splunk search but i have some trouble with dynamic search.
i will make a simple exemple :

i have a dashboard where i use a panel table element containing a search based on indexsearch and kv store lookup.
my data is from and hadoop environnement. (so i can't use realtime search with map reduce i know it)

but now, if we are 4 users and someone update a value of a kv store. the both other users should know automatically the change.

how can i do that ?

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...