Implementing Splunk 7, Third Edition - Third Edition

Actions

Let's inspect the elements on this page. Below the Search bar, we have the event count, action icons, and menus:

Starting from the left, we have the following:

• The number of events matched by the base search. Technically, this may not be the number of results pulled from disk, depending on your search. Also, if your query uses commands, this number may not match what is shown in the event listing.
• Job: It opens the Search job inspector window, which provides very detailed information about the query that was run.
• Pause: It causes the current search to stop locating events but keeps the job open. This is useful if you want to inspect ...