Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Running Saved Searches with Default Index _internal

$
0
0

HI, I did search query as follows: index=_internal sourcetype=scheduler

And I get to see things in the resulting log that certain fields appears such as "run_time", "dispatch_time", and "scheduled_time."

I want to know every nitty-gritty details in how those certain fields working inside and outside. You could pinpoint where I can find those info or you could explain in your own words fully here. Especially, I would like to understand completely in inner mechanism of "dispatch_time."

Thanks.


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>