Splunk Search

Show scheduled search in something like the flashtimeline

pinzer
Path Finder

Hi all, is there a method to show scheduled search with the result of the last schedule? something like the flashtimeline but with the last scheduled result? thanks a lot

Tags (2)
0 Karma

sideview
SplunkTrust
SplunkTrust

Not directly, no. However you can go to the Jobs page (Jobs link in the upper right), and then filter by saved search name, and then click the most recently run job. That will load the most recent results in the flashtimeline view.

Although it's not a single click maybe it's close enough for your purposes. I actually plan on building just such a view in the next few weeks.

Also if you're running 4.2 you might want to check out the new Alerts interface if you havent already.

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...