I know I can monitor the usage of saved search by saved_search_name from _audit index. However, I can't find equivalent way to search that for view.
Any idea?
You can take a look at the splunkweb access log:
index=_internal sourcetype=splunk_web_access uri_path=*/app/<your_app>/<your_view>
Replace <your_app>
and <your_view>
with the app and view you want to see.
You can take a look at the splunkweb access log:
index=_internal sourcetype=splunk_web_access uri_path=*/app/<your_app>/<your_view>
Replace <your_app>
and <your_view>
with the app and view you want to see.