Modify your index scope
You can choose to monitor all indexes, or, for better search performance and optimal resource use, select specific indexes for monitoring. You can always update this list later in the app settings.
To modify existing index scope:
-
On the main page of the app, select the Settings icon. The Index Scope section displays the indexes that are currently being monitored, to modify this list, click Edit.
-
In the Index Scope page, you can check Monitor all indexes to add all of your indexes. Avoid monitoring all indexes if possible.
-
Under Indexes to monitor, select the drop-down list. The drop-down list displays all of your indexes, including the ones that are being monitored.
-
Uncheck indexes that you want to remove from your monitor list.
-
Check indexes that you want to add to your monitor list.
-
In the Latency Detection Window section, select the lookback period for latency metrics.
-
In the Metrics collection frequency section, select how often Splunk runs the scheduled searches that collect ingest metrics.
-
Select Save.