https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463104#M140472 <P>It's a little misleading, but the column you're looking for is "published"</P> <PRE><CODE>| rest splunk_server=local count=0 /services/search/jobs | table reportSearch published </CODE></PRE> Thu, 06 Feb 2020 22:58:16 GMT codebuilder 2020-02-06T22:58:16Z https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463103#M140471 <P>Hello,<BR /> I have managed to locate the jobs within the <CODE>Job Manager</CODE> through the following search:</P> <PRE><CODE>| rest /services/search/jobs </CODE></PRE> <P>The only problem is that I cannot find the <CODE>Created at</CODE> column on the <CODE>Job Manager</CODE> within the result set. There is an <CODE>Updated</CODE> column, but this value is sometimes in the past, specifically for saved searches.</P> <P>Where can I find the data that I'm looking for?</P> <P>Thanks!</P> <P>Andrew</P> Thu, 06 Feb 2020 11:23:29 GMT https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463103#M140471 andrewtrobec 2020-02-06T11:23:29Z https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463104#M140472 <P>It's a little misleading, but the column you're looking for is "published"</P> <PRE><CODE>| rest splunk_server=local count=0 /services/search/jobs | table reportSearch published </CODE></PRE> Thu, 06 Feb 2020 22:58:16 GMT https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463104#M140472 codebuilder 2020-02-06T22:58:16Z https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463105#M140473 <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8334i96589D6AF3E57716/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Thu, 06 Feb 2020 23:01:44 GMT https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463105#M140473 codebuilder 2020-02-06T23:01:44Z https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463106#M140474 <P>@codebuilder Yup, that's the one! Awesome, thank you.</P> Fri, 07 Feb 2020 06:36:06 GMT https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463106#M140474 andrewtrobec 2020-02-07T06:36:06Z https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463107#M140475 <P>Glad to help.</P> Fri, 07 Feb 2020 14:45:41 GMT https://community.splunk.com/t5/Splunk-Search/Where-can-I-find-the-quot-Created-at-quot-field-from-the-quot/m-p/463107#M140475 codebuilder 2020-02-07T14:45:41Z