Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
81 results
Sorted by:
10-07-2020
08:21 AM
Hi Team, We are experiencing frequent high CPU usage on Indexers and it seems like the huge factor of it are from searches with "All time" Time filter and real time searches. With this, do we h...
- Tags:
- capabilities
- cpu
- roles
Labels
- Labels:
-
other
Show results in replies (3)
-
To deny real-time searches, remove the " rtsearch" and "schedule_rtsearch" capabilities from the of...
-
...range of 1 hour. * When set to '-1', the role does not have a search time range limit. T...
-
...time-searches-disliked-in-the-Splunk-world... Now, to get rid of All time, here's what you need to do....
12-16-2013
12:08 PM
1 Karma
Hi,
Is it possible to give people the ability to execute, but not schedule real-time searches?
11-04-2016
08:22 AM
i want to restrict all users access to real time data and real time searches. how can i do this?
10-06-2014
06:53 AM
1 Karma
...uccessfully as I was able to get all the real-time searches disabled, except for real-time ----> 24 hour window (real-time) from the panel. Could somebody suggest how to remove 24 hour window (real - time...
02-19-2019
11:56 AM
I am looking to restrict the use of certain search commands for particular users / roles.
In particular I would like users not to be able to use the rest command.
I have created a role and o...
10-22-2021
12:15 AM
If you look at the picture I cant see the real time alert option, Could you please assist me to get this on my splunk ?
Labels
- Labels:
-
alert action
-
cron
-
throttling
01-13-2015
02:43 PM
2 Karma
...unning searches and their memory usage in real-time? I would like to see something similar to 'top' results. thanks
12-22-2015
07:03 AM
1 Karma
...uddenly reaches 70 GB or more. So, if I can run this search in real-time and license usage reaches 70 GB, it should throw an alert.
Thanks In Advance
09-19-2016
12:22 PM
Hi,
Is there a way to limit how long a real-time search can run? I have customers firing them up (legitimately) and then walking away.
05-23-2020
11:10 AM
...ame_10
5/22/2020, 2:00:52 PM.
The blocked host name belongs to a domain controller where I just deployed a UF. I'm not receiving any data from this forwarder.
This is harder than I a...
- Tags:
- splunk-enterprise
