Splunk Search

subsearch and search

New Member

in ES content management, if i click the subsearch, it will bring me to the edit page. but when i click search or view, it display the blank page, where can we find the detail of the search and view?

in ES, can we go to search/search menu and run the subsearch or subsearch has to be runned in content managment as scheduled job? thanks


Labels (1)
0 Karma

New Member

also for my saved search, if i go to report, choose open in search window, the search will get executed, is there any way, we can view the spl command of the search without executing the search?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more with ITSI’s ...

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more! Faster Time to ValueManaging and ...

New Release | Splunk Enterprise 9.3

Admins and Analyst can benefit from:  Seamlessly route data to your local file system to save on storage ...

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...