icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Splunkbase will be undergoing a scheduled migration and will be unavailable on Saturday, Oct 1, 2022, from 11AM to 3PM PDT

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Scheduling Inspector
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

splunk

Scheduling Inspector

Overview
Details
Scheduling Inspector ensures your searches are meeting best practices by investigating your scheduled searches for common errors when it comes to time spans and ownership. Scheduled Searches can be improperly set to where the time span of the search and the scheduling differ. This leads to the potential of missed alerts and events or wasteful searches that are taxing your Splunk system with overlapping time spans.

Scheduled Searches can also lose their ‘owner’ and become an orphaned search, decreasing visibility and longevity of the environment. Atlas not only automatically identifies these problematic searches but enables easy access to them for further investigation. Scheduling Inspector also provides an automation feature that will quickly remedy the issues it discovers, enabling your Admins to quickly optimize their environment.

Scheduling Inspector is a component of the Atlas Platform. The Atlas Platform is focused on helping Splunk owners achieve outcomes from their Splunk investment rapidly with prebuilt solutions that address common use-cases, tools that support common workflows, and automation tools that enable Splunk Admins and their Users to do more in less time. Atlas also comes with Expertise on Demand, which gives you access to Splunk experts who can assist you and your Splunk Team with building out use cases and for support of the Atlas and Splunk platforms.

Atlas is a premium solution requiring a paid license. Please contact Kinney Group to schedule a demo or request a quote.

Scheduling Inspector
Scheduling Inspector identifies search coverage gaps for scheduled searches and provides an automated tool for correcting them. Coverage gaps are bad for Splunk because the time between each scheduled run of a search is greater than the time window in which your search runs. In this case, a search may miss the oldest data in the time window producing incomplete results.

Scheduling Inspector also identifies searches with excessive time windows. If the time between each run of scheduled search is less than the time window of your search, then mulitple runs may return overlapping results. Not only does the search use more system resources than necessary in this case, but it also may produce duplicate alerts or summary index events. With the workload based pricing model now being prevelent in Splunk, optimizing your scheduled searches in this way can help to keep your Splunk Cloud costs down.

Key Features
- Reveals misconfigured Scheduled Searches that are missing data based on its schedule and time range
- Illuminates misconfigured Scheduled Searches that are producing overlapping searches on data, possibly wasting system resources.
- Provides tools to investigate searches further and edit their SPL if necessary.
- Automation to easily fix any identified search in 2 button clicks, to catch missing data or reduce overlapping time ranges.
- Identifies orphaned searches and provides an automated process to reassign them to active Splunk owners.


Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.