Monitoring Splunk

How to search usage of "view"?

Path Finder

I know I can monitor the usage of saved search by saved_search_name from _audit index. However, I can't find equivalent way to search that for view.

Any idea?

Tags (1)

Re: How to search usage of "view"?


You can take a look at the splunkweb access log:

index=_internal sourcetype=splunk_web_access uri_path=*/app/<your_app>/<your_view>

Replace <your_app> and <your_view> with the app and view you want to see.

View solution in original post

Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.