- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ankitarath2011
Path Finder
08-05-2021
11:53 AM
I want to know the execution time of scheduled alerts in splunk_instrumentation apps which are scheduled at 3 am. Nothing is showing when I am opening the "View Recent" option. Even in job manager nothing is showing.
Following are the alerts
instrumentation.usage.smartStore.config
instrumentation.usage.workloadManagement.report
instrumentation.usage.authMethod.config
instrumentation.usage.healthMonitor.report
instrumentation.usage.passwordPolicy.config
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
codebuilder
Influencer
08-06-2021
11:01 AM
You try something like this:
index=_internal sourcetype=scheduler | table _time user savedsearch_name status scheduled_time run_time result_count
----
An upvote would be appreciated and Accept Solution if it helps!
An upvote would be appreciated and Accept Solution if it helps!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ankitarath2011
Path Finder
08-08-2021
11:40 PM
thanks @codebuilder
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
codebuilder
Influencer
08-06-2021
11:01 AM
You try something like this:
index=_internal sourcetype=scheduler | table _time user savedsearch_name status scheduled_time run_time result_count
----
An upvote would be appreciated and Accept Solution if it helps!
An upvote would be appreciated and Accept Solution if it helps!
