spent a while this morning trying to figure out why my #Splunk searches were so slow today … before I realized I’d put a ‘d’ instead of an ‘h’ in my lookback period Instead of looking back 36 *hours*, it was looking through 36 *days* Whoops!

spent a while this morning trying to figure out why my #Splunk searches were so slow today … before I realized I’d put a ‘d’ instead of an ‘h’ in my lookback period

Instead of looking back 36 *hours*, it was looking through 36 *days*

Whoops!

— Warren Myers ?? (@warrenmyers) August 28, 2020

from Twitter https://twitter.com/warrenmyers

August 28, 2020 at 11:06AM
via IFTTT