splunk enterprise version : 6.3.1
earliest_time : "-5m",
latest_time:"now"
exec_mode:"blocking",
search : "index= xxxxx------------------------- very complex."
current my method like this javascript code:
setTimeout(function(){
console.log("start update search...");
serviceStatus.startSearch();
},10000);
for 10second result refresh.
Is there any other better way?
↧