Splunk search for List of skipped searches

Copy
index=_internal sourcetype=scheduler savedsearch_name=* status=skipped | stats count as Count by savedsearch_name reason | rename savedsearch_name as "Search Name", reason as Reason
This search will provide a list of all skipped searches during the given search window. This search will provide the name of the search that was skipped, how many times each search was skipped and the reason each search was skipped.
0 comments

Category:

General Splunk


Tags:

administration internal

Search Commands:

Sign in or Register to submit a comment