Question

I am using Splunk community edition for a monitoring dashboard. I display a page of real time charts, I refresh the browser every now and then via a script.

This all works well however I am looking for a way to finalize and delete jobs running in the background as there is a limit as to how many live charts one can display in the community edition and when it refreshes the browser it seems to run to the limit after a while.

Thus how can I schedule the finalizing and deleting of the old jobs? (possibly a file I can remove from time to time)

Was it helpful?

Solution

I've overcame it by putting this at the top of my dashboard view (surrounded by XML tags):

< view autoCancelInterval="5" template="dashboard.html" >

The auto-cancel interval is set to 5 seconds. This means that when the search becomes inactive for 5 seconds or more, it will automatically cancel the search from running.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top