SPL
Detect Scheduler Running Twice a Search
Description
There is a bug that make a search being executed 2 times or more.
0 0
index=_internal sourcetype=scheduler scheduled_time=* savedsearch_name=* |stats count by scheduled_time, savedsearch_name | where count > 1
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.