Has anyone been able to convert the data preview tool under the search app so its not a real-time metadata search? We have users that launch the preview and forget to that its open and in-turn cause a real-time search to continue to be ran.
Thanks!
Hi @aaronkorn
I've seen posts similar to your question. Check these out and see if they're helpful with understanding your issue.
http://answers.splunk.com/answers/141179/how-to-remove-automatic-real-time-searches-that-run-when-us... http://answers.splunk.com/answers/103589/search-summary-page-automatically-runs-real-time-searches
