Disable agents lookup

Disable the agents lookup to view real-time data in the agent management UI by unscheduling the relevant saved search.

If you no longer need the agents lookup, or if you prefer to view real-time data in the agent management UI, disable the agents lookup by unscheduling the relevant saved search.

  1. Log in to Splunk Web.
  2. From the top menu, select Settings > Searches, reports, and alerts.
  3. On the Searches, Reports, and Alerts page, change the App filter to SplunkDeploymentServerConfig.
  4. Change the Owner filter to All.
  5. Find the saved search named DeploymentServerCreateAgentsLookup.
  6. In the row for this saved search, select the Edit drop-down list, and then select Edit Schedule.
  7. In the Edit Schedule window, deselect the Schedule Report checkbox.
  8. Select Save to apply your changes.

The agents lookup is now disabled. The agent management UI will display real-time data from the index.