Splunk Search

missing sourcetype - splunk_resource_usage index=_introspection - splunk v.7.3.0

Path Finder

Yesterday I installed splunk 7.3.0 and I start running some searches and then I wanted to see statistics of my searches as there where some slow searches for the memory and cpu usage per search so I went in Monitoring Console-> Search -> Top 20 Memory-Consuming Searches but the graph is empty and when I check if there is data in that sourcetype, there isn't any.
sourcetype - splunk_resource_usage index=_introspection
Why ?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...