Monitoring Splunk

How to search usage of "view"?

Path Finder

I know I can monitor the usage of saved search by saved_search_name from _audit index. However, I can't find equivalent way to search that for view.

Any idea?

Tags (1)

Re: How to search usage of "view"?


You can take a look at the splunkweb access log:

index=_internal sourcetype=splunk_web_access uri_path=*/app/<your_app>/<your_view>

Replace <your_app> and <your_view> with the app and view you want to see.

View solution in original post