Splunk Search

subsearch issue

ajitshukla61116
Path Finder

Hi all,
I am in need of help.
I need to generate an alert that runs after ever 30 minutes. and calculate the following
total log ingested in current 30 minutes , total log ingested in last 30 minutes , total log ingested in a day ,total log ingested in a week.
I have used append command and sub searches for every scenario but it is duplicating the total number of events.
How can i proceed with it ??
Kindly help

Tags (1)
0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...