Splunk Search

Real-time query with click on table doesn't work?

fpedrosa
Engager

Hello,

 

I have a table with a custom Splunk Query, and a custom Click on an Cell.. work fine if I select to filter any filter than "Real Time" .  Using real time, this click doesn't work, appears to recreate the query every second, and when I click the action is not triggered.

 

How can I fix that?

 

Thanks

Labels (5)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @fpedrosa,

In general, avoid to use Real Time searches because they are very expensive in resource use, because a search takes a CPU and release it when finished, with a Reta Time search the CPU isn't released.

You can schedule a panel's refresh e.g. every minute having the same result.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...