I'm looking for a search or rest call that will show me all searches that are configure to run in realtime as I think the number of realtime searches we have is causing performance issues. Anyone have such a search? Thank you.
see here:
https://answers.splunk.com/answers/204695/how-to-get-list-of-realtime-searches-and-the-macro.html
https://answers.splunk.com/answers/678690/how-can-i-get-the-list-of-saved-realtime-searches.html
https://answers.splunk.com/answers/678690/how-can-i-get-the-list-of-saved-realtime-searches.html
hope it helps
see here:
https://answers.splunk.com/answers/204695/how-to-get-list-of-realtime-searches-and-the-macro.html
https://answers.splunk.com/answers/678690/how-can-i-get-the-list-of-saved-realtime-searches.html
https://answers.splunk.com/answers/678690/how-can-i-get-the-list-of-saved-realtime-searches.html
hope it helps
Thank you!