Community
Splunk Answers
Splunk Administration
Deployment Architecture
Getting Data In
Installation
Security
Knowledge Management
Monitoring Splunk
Using Splunk
Splunk Search
Dashboards & Visualizations
Splunk Dev
Alerting
Reporting
Other Usage
Splunk Platform Products
Splunk Enterprise
Splunk Cloud Platform
Splunk Data Stream Processor
Splunk Data Fabric Search
Splunk Premium Solutions
News & Education
Blog & Announcements
Community Blog
Product News & Announcements
Practitioner Resources
Adoption Boards
Community Office Hours
Splunk Tech Talks
Great Resilience Quest
Training & Certification
Training + Certification Discussions
Training & Certification Blog
Community Lounge
Getting Started
Welcome
Feedback
SplunkTrust
User Groups
Splunk Love
Apps and Add-ons
All Apps and Add-ons
User Groups
Resources
SplunkBase
Developers
Documentation
Splunk Ideas
Sign In
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
All community
Knowledge base
nkoyama_splunk
Users
Products
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
Ask a Question
About nkoyama_splunk
nkoyama_splunk
Splunk Employee
Member since:
02-03-2016
06-05-2020
Community Statistics
Posts
1
Solutions
0
Karma Given
0
Karma Received
0
Member Since
02-03-2016
Activity Feed
Posted
Re: Splunk Hunkのジョブ調査結果取得無効方法について
on
Splunk Search
.
10-14-2017
11:05 PM
Topics I've Started
No posts to display.
View All
Latest Contributions by nkoyama_splunk
Topics nkoyama_splunk has Participated In
Latest Contributions by nkoyama_splunk
Re: Splunk Hunkのジョブ調査結果取得無効方法について
by
nkoyama_splunk
in
Splunk Search
10-14-2017
11:05 PM
10-14-2017
11:05 PM
当該データは、検索毎に作成される、結果を格納するinfo.csvに保存されるデータになります。当該機能はトラブルシューティング等に利用される内部処理ですので、機能そのものの無効化はできないみたいです。 $SPLUNK_HOME/var/run/splunk/dispatch/<サーチ毎のIDフォルダ>/info.csv 但し、上記の検索毎に作成されるフォルダの保存期間を変更することは可能です。(通常のアドホックサーチは10分) ・アドホックサーチの場合 limits.conf [search] ttl=<integer:秒> remote_ttl=<integer:秒> [subsearch] ttl=<integer:秒> https://docs.splunk.com/Documentation/SplunkCloud/6.6.3/Search/Dispatchdirectoryandsearchartifacts
... View more
Contact Me
Online Status
Offline
Date Last Visited
06-05-2020
02:04 AM