SPL
Events Sent to Null Que - Internal Logs
Description
This will show events that have been sent to the null que within the splunk internal logs.
0 0
index=_internal component=metrics processor=nullqueue group=pipeline sourcetype=splunkd | table _time log_level name processor cpu_seconds executes, cumulative_hits
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.