Hi,
I need a detailed report on search concurrency, for both scheduled and interactive searches. How would I get that?
Did SoS or DMC not provide that info?
Something like this could point you towards the right direction 😉
index=_internal source=*metrics.log group="search_concurrency" sourcetype=splunkd | timechart span=1h avg(active_hist_searches) as concurrent_searches by host
