The Splunk Interface - Implementing Splunk: Big Data Reporting and Development for Operational Intelligence - page 11

Note that the URL in the browser has changed to flashtimeline .
You may see references to flashtimeline from time to time. It is
simply another name for the search interface.

See the Using the time picker section for details on changing the time frame of
your search.

Actions
Let's inspect the elements on this page. Below the search bar itself, we have the event
count, actions icons, and menus.

Starting at the left, we have:

• The number of events matched by the base search. Technically, this may not
be the number of results pulled from disk, depending on your search. Also,
if your query uses commands, this number may not match what is shown in
the event listing.
• Send to background ( ), which sends the currently running search to the
background, where it will continue to run. Jobs sent to the background and
past jobs can be restored from the Jobs window.
• Pause ( ), which causes the current search to stop locating events but keeps
the job open. This is useful if you want to inspect the current results to
determine whether you want to continue a long running search.
• Finalize ( ), which stops the execution of the current search but keeps the
results generated so far. This is useful when you have found enough and
want to inspect or share the results found so far.
• Cancel ( ), which stops the execution of the current search and immediately
deletes the results.
• Job Inspector ( ), which opens the Search job inspector window, which
provides very detailed information about the query that was run.
• Print ( ), which formats the page for printing and instructs the browser

to print.