/
Savedsearches
Savedsearches
This application contains the following saved search
Delete Older TIDE data from `infoblox_tide` : TIDE data older than 24 hours will be deleted from `infoblox_tide`.
Delete Older Dossier data from `infoblox_dossier` : Dossier data older than 24 hours will be deleted from `infoblox_dossier`.
Enable/Disable Savedsearches
If User wishes to enable or disable any existing savedsearches follow below steps.
Click on setting > Searches, reports, and alerts
Then select App as ‘Infoblox App For Splunk’ and type the name in the filter section And User will see that savedsearch.
click on the Edit button, it will display the enable/disable button.
All savedsearches will be disabled by default except index data to ingest to master lookup savedsearches.
Related content
Macros
More like this
Lookups
More like this
Sourcetypes
Sourcetypes
More like this
About Reports
About Reports
More like this