Hi Folks;
Wondering what would be the impact of disabling real-timesearches for existing reports/dashboards? Of course when we set up Splunk, we never set the default to disable RTS. Now users a...
I understand that realtimesearches on splunk are very expensive and should be avoided. My question is an extension to what has been asked and answered to some extent in the thread below
http://a...
hi! I am currently creating a dashboard where I run a total of 14 concurrent realtimesearches. whenever I run the dashboard, the data shown in dashboard updates after 10 seconds, but that is too m...
I am trying to convert real-timesearchesin the dashboard to scheduled real-timesearches to reduce performance overhead/tradeoff on indexer. I was looking to implement the suggestion in the b...
The dashboard has around thirty panels and each of the query has at least 3 parameters changing. So it is hard to create a post processing to optimize the dashboard. Is there any way the dashboard w...
Hi Splunkers, Good day. I am experiencing an issue in our cluster where the searches are all skipping with the reason "Searchable rolling restart or upgrade is in progress". My understanding is t...
...unning unless I get rid of the other, real-timesearches.
I've been investigating and found out about max_searches_per_cpu , base_max_searches and max_rt_search_multiplier options of limits.conf...
I'm trying to figure out why anyone would want to create a dashboard inSplunk. Views allow you to add forms along with any charts andsearches, while dashboards only show static charts. So, why w...
We just got Splunk Cloud up and running, and I'd like some tips on how to tell if it's healthy and to troubleshoot problems. Can you get me started, and point me to some resources?