/
Savedsearches

Savedsearches

 This application contains the following saved search 

  • Delete Older TIDE data from `infoblox_tide` : TIDE data older than 24 hours will be deleted from `infoblox_tide`.

  • Delete Older Dossier data from `infoblox_dossier` : Dossier data older than 24 hours will be deleted from `infoblox_dossier`.

Enable/Disable Savedsearches

  1. If User wishes to enable or disable any existing savedsearches follow below steps.

  2. Click on setting > Searches, reports, and alerts

  3. Then select App as ‘Infoblox App For Splunk’ and type the name in the filter section And User will see that savedsearch.

  4. click on the Edit button, it will display the enable/disable button.

  5. All savedsearches will be disabled by default except index data to ingest to master lookup savedsearches.

Related content