Splunk Search

Show scheduled search in something like the flashtimeline

pinzer
Path Finder

Hi all, is there a method to show scheduled search with the result of the last schedule? something like the flashtimeline but with the last scheduled result? thanks a lot

Tags (2)
0 Karma

sideview
SplunkTrust
SplunkTrust

Not directly, no. However you can go to the Jobs page (Jobs link in the upper right), and then filter by saved search name, and then click the most recently run job. That will load the most recent results in the flashtimeline view.

Although it's not a single click maybe it's close enough for your purposes. I actually plan on building just such a view in the next few weeks.

Also if you're running 4.2 you might want to check out the new Alerts interface if you havent already.

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...