See the answer below. (replace property name POLLER_INACTIVITY_TIMEOUT with ui_inactivity_timeout)
The realtime search should run indefinitely till the browser is closed.
See the answer below. (replace property name POLLER_INACTIVITY_TIMEOUT with ui_inactivity_timeout)
The realtime search should run indefinitely till the browser is closed.
In Splunk Web -> Manager -> General Setting -> Session Timeout, could you see/set the appropriate values (30d).
The use case is exactly the same. I have a NOC that is watching these dashboards. What would I set it to? I set it to 43200 (30 days) but the UI seemed to spaz out when I did. the Search head seemed like it lost connectivity to the indexer every time I moved the mouse.