Hi, there is an api to check the current status of a splunk environment and of the machine where splunk is running (disk space, cpu usage, etc)? thanks ... View more

Hi, hi have this search template: index=* sourcetype="$sourcetype$" | .... the $sourcetype" value is coming from an input dropdown like this: <input type="dropdown" token="sourcetype" id="sourcetype_input"> <label>1. Select a sourcetype.</label> <choice value="*">All</choice> &lt;populatingSearch earliest="$earliest$" latest="$latest$" fieldForLabel="sourcetype" fieldForValue="sourcetype"&gt;| metadata type=sourcetypes index=* | fields sourcetype | sort sourcetype&lt;/populatingSearch&gt; </input> If I set as selected value "All" in my dashboard, the search will be: index=* sourcetype="All" | .... and not index=* sourcetype="*" | .... How can i fix this? ... View more

Hi, I have a dashboard with parameterized search (it takes three arguments from timepicker and dropdowns) that takes long time if I have a big amount of data because of two external lookups I use. 1) Is there a way to cache / save / speed-up my search? Please note that I need realtime results too, because the user can choose real time window too, I cannot use summary index because I don't need just statistical data, but fields like name category country timestamp 2) Is there a way to avoid the recalculation of the results when I navigate away and back to the dashboard? thanks! ... View more