Splunk Search

Show scheduled search in something like the flashtimeline

pinzer
Path Finder

Hi all, is there a method to show scheduled search with the result of the last schedule? something like the flashtimeline but with the last scheduled result? thanks a lot

Tags (2)
0 Karma

sideview
SplunkTrust
SplunkTrust

Not directly, no. However you can go to the Jobs page (Jobs link in the upper right), and then filter by saved search name, and then click the most recently run job. That will load the most recent results in the flashtimeline view.

Although it's not a single click maybe it's close enough for your purposes. I actually plan on building just such a view in the next few weeks.

Also if you're running 4.2 you might want to check out the new Alerts interface if you havent already.

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...