Splunk Search

Show scheduled search in something like the flashtimeline

pinzer
Path Finder

Hi all, is there a method to show scheduled search with the result of the last schedule? something like the flashtimeline but with the last scheduled result? thanks a lot

Tags (2)
0 Karma

sideview
SplunkTrust
SplunkTrust

Not directly, no. However you can go to the Jobs page (Jobs link in the upper right), and then filter by saved search name, and then click the most recently run job. That will load the most recent results in the flashtimeline view.

Although it's not a single click maybe it's close enough for your purposes. I actually plan on building just such a view in the next few weeks.

Also if you're running 4.2 you might want to check out the new Alerts interface if you havent already.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...