Other Usage

How to run a scheduled search in verbose mode?

kirthika26
Explorer

My verbose mode and fast mode results are different . How to run a scheduled search in verbose mode by default?

 

added this parameter in the search stanza in savedsearches.conf

display.page.search.mode = verbose

But no effect, it is still running in fast mode.

Splunk Enterprise Version: 9.0.4.1

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

maybe it’s more efficient to fix your SPL to give the same result with fast mode? 
r. Ismo

0 Karma
Get Updates on the Splunk Community!

Community Content Calendar, October Edition

Welcome to the October edition of our Community Spotlight! The Splunk Community is a treasure trove of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...