About lloyddavage

lloyddavage · ‎01-04-2019

Hi, I have no access to the configuration for the splunk deployment. I am just a user so can only do stuff from the frontend. ie. Dashboard, report, search etc...

lloyddavage · ‎01-04-2019

Hi, We have a dashboard that runs around 17 queries. This is on a monitor screen that is rotating through other websites so is getting rerun every 5 minutes. However this is leaving behind many jobs on the job manager how do I stop it from leaving these to expire can I make it remove the job immediately as I only need a count for the result rather than the query itself. I was thinking dispatch.ttl setting but cant see how that is applied to Dashboards.

lloyddavage · ‎12-13-2018

Thank you very much

lloyddavage · ‎12-13-2018

The below query works fine it. It displays all of the heartbeats generated. What I would like though is to show just the last heartbeat for each Category, Source. So I can display just the latest timestamp. Currently, this lists all results desc. What I would like though is the results should be just the top 3 lines so grouped by host, EventCode, Category, EDSource, EDRecordID, EDTime. So it should in this instance display the top 3 lines. This will be across multiple hosts at some point and then can be displayed on a dashboard.

Posts	6
Solutions	0
Karma Given	0
Karma Received	3
Member Since	‎12-13-2018

Online Status	Offline
Date Last Visited	‎02-26-2021 09:00 AM

Jobs not being removed

How do I make a search that groups output and give...

Re: Jobs not being removed

Jobs not being removed

Re: How do I make a search that groups output and ...

How do I make a search that groups output and give...