×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
olgademo
New Member
Member since: ‎01-02-2020
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎01-02-2020
View All

Re: Search History disappeared ( Splunk Enterprise...

by in Splunk Enterprise
‎01-05-2020 05:18 PM
‎01-05-2020 05:18 PM
Hi ivanreis, thanks for your advice. I located the file you mentioned. It had recent UI:Dashboard and today's UI:Search lines, but nothing from Jan 1, 2 or December. Those searches are not in there, and I did not delete them. I don't think I am running on the search head cluster, unless it is a default mode. Can it be a bug? ... View more

Why did my search history disappear( Splunk Enterp...

by in Splunk Enterprise
‎01-05-2020 10:05 AM
‎01-05-2020 10:05 AM
Lost my Search History twice: on Jan 02 - but it came back, and on Jan 03, and it was not recovered since. I checked that I am in the right app, and set "All Time". - |history returns recent 30 searches, mostly from file loading or UI, not my own - index=_internal user=* sourcetype=splunkd_ui_access | dedup q | table _time, q | eval q=urldecode(q) returns 30 searches, not my custom ones except one ( ?!) Installed Splunk Enterprise 8.0.1 at the end of Dec ; Search history was there every time I logged in except the hicckup on Jan 02 and full disappearance on Jan 03. Thanks! ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:03 AM