Splunk Search

Issue with real-time searches for metadata running because of ui-prefs.conf settings.

simranrathi123
Engager

When we launch Splunk Home or Search page, there is this metadata that runs in real-time eating up our resources available at hand.

|metadata type=sourcetypes | search totalcount>0

I have read other answers here in the forum that say it can be disabled by changing the config at ui-prefs.conf.

My question is: What would be any repercussions of performing this tweak - is this search actually being used somewhere else?
Actually, what is the purpose/benefit/importance of this search?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Index This | How many sides does a circle have?

  March 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

New This Month - Splunk Observability updates and improvements for faster ...

What’s New? This month, we’re delivering several enhancements across Splunk Observability Cloud for faster and ...

What's New in Splunk Cloud Platform 9.3.2411?

Hey Splunky People! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2411. This release ...