Splunk Search

Show scheduled search in something like the flashtimeline

pinzer
Path Finder

Hi all, is there a method to show scheduled search with the result of the last schedule? something like the flashtimeline but with the last scheduled result? thanks a lot

Tags (2)
0 Karma

sideview
SplunkTrust
SplunkTrust

Not directly, no. However you can go to the Jobs page (Jobs link in the upper right), and then filter by saved search name, and then click the most recently run job. That will load the most recent results in the flashtimeline view.

Although it's not a single click maybe it's close enough for your purposes. I actually plan on building just such a view in the next few weeks.

Also if you're running 4.2 you might want to check out the new Alerts interface if you havent already.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...