Reporting

How to run a search in splunk after every 5 minutes everyday?

nikhiltikoo
Explorer

I am searching for some data on Splunk for a 5 minute time range. I want this search to run after every 5 minutes in Splunk on its own. How can this be done? I tried finding it on Splunk, but all I can see is how to schedule alerts and reports. And after the search is activated, how can we access the produced results generated by the search?

0 Karma

woodcock
Esteemed Legend

Save it as an alert and you can "process" the results of the query and act on them externally (e.g. call a script if the number of results is greater than 0).

0 Karma

paramagurukarth
Builder
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...