Splunk Search
Highlighted

How to find historical concurrent searches?

Path Finder

hi,

Is there any search or way to find the historical concurrent searches in Splunk? I would like to know trend in the increased number of concurrent searches.

0 Karma
Highlighted

Re: How to find historical concurrent searches?

Influencer

I use this one as a stacked column chart...
index=_internal sourcetype=splunkd source=*metrics.log group=search_concurrency user=* host=mysearchhead
| timechart avg(active_hist_searches) as "Historical Searches" avg(active_realtime_searches) as "Real-time Searches" by user useother=f limit=20

View solution in original post