https://community.splunk.com/t5/Getting-Data-In/How-to-get-the-job-s-log-file-from-client-by-REST-API/m-p/330428#M93468 <P>Hi,</P> <P>Did you search <CODE>index=_internal</CODE> logs for that client? </P> Tue, 23 Jan 2018 04:34:32 GMT p_gurav 2018-01-23T04:34:32Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-the-job-s-log-file-from-client-by-REST-API/m-p/330427#M93467 <P>I made a big POST(REST API) request to "services/search/jobs" by collect with index and marker, it will return a sid. The job is taking too long(&gt; 6hrs). I know I can query the status by /services/search/jobs/${sid}. But it cannot provide more information for debugging. How can I get this job's log file(/var/log/splunk/searchs.log etc ) from client?</P> Mon, 22 Jan 2018 22:19:06 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-the-job-s-log-file-from-client-by-REST-API/m-p/330427#M93467 jenniferhao 2018-01-22T22:19:06Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-the-job-s-log-file-from-client-by-REST-API/m-p/330428#M93468 <P>Hi,</P> <P>Did you search <CODE>index=_internal</CODE> logs for that client? </P> Tue, 23 Jan 2018 04:34:32 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-the-job-s-log-file-from-client-by-REST-API/m-p/330428#M93468 p_gurav 2018-01-23T04:34:32Z