Splunk Search
Highlighted

Plan searches by editing configuration files

Hello everybody,

is there a way to plan searches by editing a configuration file? Usually I plan searches through splunk web, setting start time, ending time, alerts and etc...now I want to do the same thing writing the searches into a config file. It is possible?

0 Karma
Highlighted

Re: Plan searches by editing configuration files

Legend

Sounds like what you want is a saved search? http://docs.splunk.com/Documentation/Splunk/5.0.2/Tutorial/Saveasearch

0 Karma
Highlighted

Re: Plan searches by editing configuration files

Ok, but I want to do this allowing an application(written on my own) to edit a config file. Is this file "savedsearches.conf"?

0 Karma
Highlighted

Re: Plan searches by editing configuration files

Ok, but I want to do this allowing an application(written on my own) to edit a config file. Is this file "savedsearches.conf"?

0 Karma
Highlighted

Re: Plan searches by editing configuration files

Splunk Employee
Splunk Employee

Yes, It's savedsearches.conf