Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Make splunk return latest results first

$
0
0
Hi, I have a dashboard with search queries which take tens of seconds to run. The results are displayed as charts, and they tend to come in random order (i.e. we see the line grow randomly across the X axis). Yet what I tend to worry the most about are the most recent days. I was wondering if there was a way to give a hint to Slunk to specify that I am more interested in seeing the latest results first? I understand this may not be in a strict order given the map-reduce, but if say each indexer returned the results in that order it would already be helpful. Thx, Thibault.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>