The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.

Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.

Forums: SplunkRequest: Saved Search minor nitpicks

Next Topic: SysV init script


Posts 1–1 of 1
1
posted by: askreet  |  posts
date: February 28, 2011
permalink

After managing a largish collection of saved searched a few things come to mind as annoying, yet probably easily fixed.

- When closing a search, clone the name of the search as well. Very often I find myself creating very similar searches that vary only by what systems they search, or what string they match. I may want to copy "Transaction Count - West Coast" and make a "Transaction Count - East Coast", but I have to have already copied that.

- Why are search names not editable after they have been saved? Is this a technical limitation or an oversight?