December 5th, 2007
Hey Browser, You’ve Got Tail!
| Topics: | dev, preview, ui |
|---|---|
| Tags: | |
| Share: |
For those interested in monitoring real-time data being consumed by Splunk we’ve introduced a new feature called Live Tail to the latest preview release. Additionally, we’ve added a nifty new REST endpoint /v3/splunk/tail for your custom application needs.
More information can be found in these videos:
- A quick walkthrough of the new preview release feature Live Tail, its UI, and some sample code - See Video
- An overview of the architecture used to integrate real-time data from Splunk Live Tail in a web browser. Challenges and workarounds when using JavaScript/Flash hybrids - See Video
Happy Streams!


December 6th, 2007 at 10:13 am
Carl,
In a distributed deployment where is the search filters applied? At the edge indexing nodes when data first hits splunk or at the UI server hosting the view?
Thanks, RJ
December 10th, 2007 at 12:15 pm
Siiiiiiiiiiiiiiicccccccccckkkkkkkkkkk!
December 10th, 2007 at 12:16 pm
Question: Is what we are seeing “pre-index”? or do we have all the searching power (including segment level searching) in Live Tail?
December 10th, 2007 at 2:09 pm
RJ,
Live tail is single server only for the near future.
Michael,
What you are seeing is pre-index, however, you have the full searching power, including segment level searching and wildcards. It doesn’t fully support search/where at the moment, but it will by GA.