Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

schedule search settings for time range

$
0
0
Hi we have created saved search with schedule type (cron every 2 mins) and time range (-2 mins earlier to now) with enabled the summary index which is working perfect. Can we schedule saved search in below manner? instead of picking time range -2mins, Can we apply the incremental time range (where if its not indexed, it can be picked up and stored in summary index)?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>