Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
63 results
Sorted by:
06-06-2014
07:34 AM
...plunk Enterprise > Search Manual > Expected performance and known limitations of real-time searches and reports
"Real-time search matches events that have arrived at the port but have not been p...
06-11-2015
06:00 PM
2 Karma
I understand that real time searches on splunk are very expensive and should be avoided. My question is an extension to what has been asked and answered to some extent in the thread below
http://a...
09-06-2018
01:46 PM
Per the real-time search documentation, you cannot use inputcsv in a real-time search. I'm looking to display real-time deviation from normality, where dynamically-generated CSVs are used to d...
04-26-2017
09:23 AM
...f a number of saved searches. This means a user with only the 'user' role can access data reports, but is unable to see the underlying data.
One of the reports we want them to see is however a real-time...
10-06-2016
01:31 PM
Hi Folks;
Wondering what would be the impact of disabling real-time searches for existing reports/dashboards? Of course when we set up Splunk, we never set the default to disable RTS. Now users a...
01-27-2021
11:23 AM
Enable alerts and reports on real-time searches seen in the internal audit index.
Labels
- Labels:
-
other
10-05-2015
11:54 AM
I am trying to convert real-time searches in the dashboard to scheduled real-time searches to reduce performance overhead/tradeoff on indexer. I was looking to implement the suggestion in the b...
04-24-2012
10:23 AM
02-01-2013
04:54 PM
3 Karma
We have multiple search heads that are available for different functions. We have one running alerts, and another dedicated to dashboarding.
Some of alerts & dashboards are real time, and p...
