Splunk Search

Retrieve Pevious Work and Queries

WhistlingFawn
Engager

Hi Splunkers. I'm new on this tool so I'm going to ask you a question. I've worked on a little project and also saved the report after having uploaded three different logsources and made some statistical analysis. Now I'd like to continue the job I left but I cannot access my previous work neither the data that I imported. Can someone give me a hand on it. Thanks

0 Karma

renjith_nair
Legend

@WhistlingFawn,
What exactly the issue? Are you not able to see any data while you search ?

Check this : https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Cantfinddata

If you have saved your reports , it should be under Reports tab for e.g.
https://your server & port here /app/search/reports

Also under Settings -> All Configurations, you should be able to see all your views/dashboards.

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...