Check search and scheduler activity in Splunk Light
You can view the status of search and scheduler activity of your Splunk Light instance using the System Activity dashboard. This dashboard displays information about search activity by user or type and scheduled report activity, which includes information about reports being run, counts of scheduler executions, and skipped reports.
In the sidebar menu, go to Activity > System activity. The System activity page displays the following panels:
- The Search Activity panel displays information about how users are running their searches, including search activity and run time information. The panels are filtered by users (admin or user reports) or types (ad hoc, other, scheduled, and summarization). See Search activity dashboards in the Splunk Enterprise Monitoring Splunk Enterprise manual.
- The Scheduler Activity panel displays information about how search jobs (reports) are scheduled. View individual reports to see search information, count of scheduler executions over time, and select the group of report data to display. Skipped reports are listed in the count of skipped reports, the report name, and reason for the skip. See Scheduler activity in the Splunk Enterprise Monitoring Splunk Enterprise manual.
Use search macros in Splunk Light
About alerting in Splunk Light
This documentation applies to the following versions of Splunk® Light (Legacy): 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6