Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
62 results
Sorted by:
10-07-2020
08:21 AM
Hi Team, We are experiencing frequent high CPU usage on Indexers and it seems like the huge factor of it are from searches with "All time" Time filter and real time searches. With this, do we h...
- Tags:
- capabilities
- cpu
- roles
Labels
- Labels:
-
other
Show results in replies (3)
-
To deny real-time searches, remove the " rtsearch" and "schedule_rtsearch" capabilities from the of...
-
...range of 1 hour. * When set to '-1', the role does not have a search time range limit. T...
-
...time-searches-disliked-in-the-Splunk-world... Now, to get rid of All time, here's what you need to do....
12-16-2013
12:08 PM
1 Karma
Hi,
Is it possible to give people the ability to execute, but not schedule real-time searches?
11-04-2016
08:22 AM
i want to restrict all users access to real time data and real time searches. how can i do this?
10-06-2014
06:53 AM
1 Karma
...uccessfully as I was able to get all the real-time searches disabled, except for real-time ----> 24 hour window (real-time) from the panel. Could somebody suggest how to remove 24 hour window (real - time...
12-22-2015
07:03 AM
1 Karma
...uddenly reaches 70 GB or more. So, if I can run this search in real-time and license usage reaches 70 GB, it should throw an alert.
Thanks In Advance
01-13-2015
02:43 PM
2 Karma
...unning searches and their memory usage in real-time? I would like to see something similar to 'top' results. thanks
09-19-2016
12:22 PM
Hi,
Is there a way to limit how long a real-time search can run? I have customers firing them up (legitimately) and then walking away.
12-20-2013
09:26 AM
1 Karma
...he reports (some over 10-20 minutes).
A few of the reports I'm able to run on a schedule and then display the results of the scheduled search rather than running them real-time. But most of my d...
09-07-2020
02:05 AM
Is it possible to search only the indexes assigned to a specific app? So far, the only recommendation I've been able to find is to restrict user roles but that doesn't work for our usage.
Labels
- Labels:
-
other
01-19-2021
05:46 AM
...alculate actual search concurrency usage and overlay with maximum search concurrency. Answer to follow.
Labels
