-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating

Advanced Splunk
By :

Search history is another useful feature introduced in Splunk 6.3 which can be used to view and interact with history of the search
command. This feature can be used to get the complete list of search queries executed on Splunk over time.
The search history feature can be accessed via the Splunk Web console by clicking on "Search & Reporting" App | Search. It takes the user to the search summary dashboard with the option to run search queries.
The following image shows the search summary dashboard from where the search history can be accessed:
The Search History option enables the following information on the screen:
The exhaustive list of search
queries run on the Splunk instance along with the time of the last run
The Action option to directly copy the respective search
query in the Search bar so as to run the search
query right away
The Filter option to choose the list of queries shown on the basis of time defined in the time range picker or some specific word/string which...
Change the font size
Change margin width
Change background colour