Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to locate and edit an existing macro search from an app (Splunk App for Unix and Linux)?

$
0
0
Is there anyway to locate and edit an existing macro search from an App (SA-nix) in this case? CPU_Exceeds_Percent_by_Host Open in Search Edit admin SA-nix Global CPU_Under_Percent_by_Host Open in Search Edit admin SA-nix Global Disk_Used_Exceeds_Perc_by_Host Open in Search Edit admin SA-nix Global IO_Utilization_Exceeds_Threshold Open in Search Edit admin SA-nix Global IO_Wait_Exceeds_Threshold Open in Search Edit admin SA-nix Global An example search macro from SA-nix. If I try to append it with function I got an error. Thoughts? `CPU_Exceeds_Percent_by_Host("`_unix_alert_threshold_CPU_Exceeds_Percent_by_Host`")` This results in: Error in 'fields' command: Invalid argument: 'earliest=-30m' `CPU_Exceeds_Percent_by_Host("`_unix_alert_threshold_CPU_Exceeds_Percent_by_Host`")` earliest=-30m

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>