Splunk Search

subsearch issue

ajitshukla61116
Path Finder

Hi all,
I am in need of help.
I need to generate an alert that runs after ever 30 minutes. and calculate the following
total log ingested in current 30 minutes , total log ingested in last 30 minutes , total log ingested in a day ,total log ingested in a week.
I have used append command and sub searches for every scenario but it is duplicating the total number of events.
How can i proceed with it ??
Kindly help

Tags (1)
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...