|
Hello everyone, I'm working with Splunk and Nagios integrated (at Zappos), and we just changed our approach to monitor an application.
We have set up almost 70 scheduled searches but we need to disable, and then erase, all of them, but we don't need to lose those. So, I'm wondering if there's any chance that Scheduled Searches, and Saved Searches, could be exported from their .conf or wherever they are stored in order to add them back to Splunk in a near (or not that near) future.
|
|
All saved searches including their scheduling (if any), name, search parameters etc reside in NOTE that, as you may know, like pretty much any Splunk configuration file Thanks! I'll check that and get back to you.
(09 Aug '11, 15:35)
gfoligna0
It works perfectly! Thank you!
(11 Aug '11, 10:33)
gfoligna0
|
