Splunk jobs software#

To handle inadvertently long-running search jobs, you can autopause a job. You might want to edit the search to change the search criteria, or you might want to pause the search or run the search in the background. Sometimes a search job runs for a long time. See Extending job lifetimes in this manual. The lifetime starts from the moment the job is run. When you run a new search, a job is retained in the system for a period of time, called the job lifetime. This can be handy if you want another user to see the results returned by the job. You can change the job permissions or send a link to the job. There are several ways to share a job with other Splunk users. Just click Job and select Edit Job Settings. You can open the Job Settings dialog when a search job is running, paused, or finalized. After you delete the job, you can still save the search as a report. Use this to delete a job that is currently running, is paused, or which has finalized.

Opens a separate window and displays information and metrics for the search job using the Search Job Inspector. The job continues to run in the background. Select this if the search job is slow to complete and you want to you work on other Splunk activities, including running a new search job.

You can use the URL to share the job with others, or to create a bookmark to the job from your web browser. Select this to open the Job Settings dialog, where you can change the job read permissions, extend the job lifetime, and get a URL for the job. While the search is running, paused, or finalized, click Job and choose from the available options. Job menuĪfter you run a search or open a report in Splunk Web, you can access and manage information about the search job without leaving the Search page. If you have the Admin role or a role with an equivalent set of capabilities, you can manage the search jobs run by other users. Jobs manager page Use the Jobs manager page to view information about recent jobs. You can access the Job Details dashboard through the Search Job Inspector. Job Details dashboard The Job Details dashboard provides a clear and concise overview of a search job process. Search Job Inspector Use the Search Job Inspector to view information about the current job, such as job execution costs and search job properties. You can inspect a job or you can manage a job. There are several ways that you can look at information about your jobs. The artifact contains the results and associated metadata that are returned at the time that the ad hoc search or saved search was run. The information that is tracked includes the owner of the job, the app that the job was run on, how many events were returned, and how long the job took to run.Įach job process creates a search artifact. Pivots, reports, and panels are powered by saved searches.Ī job is a process that tracks information about the ad hoc search or saved search. When you run a search, you are creating an ad hoc search.

Splunk jobs software#

Each time you run a search, create a pivot, open a report, or load a dashboard panel, the Splunk software creates a job in the system.