Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Scheduling a saved search to run every 30 minutes, how do I get results from the previous run instead of dispatching the search each time a user visits the page?

$
0
0
Hi All, I have 3 saved searches set up to run every 30 mins. These searches run fine and the data gets created without issues. I can then display the results on an external site by using the REST API/SDKs to grab the data. What I am having a problem with though, is each time a user hits my page: -saved search is dispatched -have to wait until saved search job is "done" before displaying results to user -once job is done, results are displayed 2 of the searches run fast and everything happens pretty quick. The final search though, is very very large and takes some time to complete (usually 3 mins to fetch all results). And because of this, some data on my site is empty until this search is done. I set up my saved searches to run every 30 mins. Is there a way to get the results from the last previous run instead of dispatching the saved search each time a user hits my page?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>