topic Re: .net SDK unable to run a blocking search in Splunk Search

Why is .net SDK unable to run a blocking search?

vinaypradhan — Tue, 14 Jun 2022 15:05:19 GMT

Hello all, if anybody had luck running a blocking search using the C# SDK, would appreciate your help.

I am trying to run a blocking search from a C# application. This is my code:

ServicePointManager.ServerCertificateValidationCallback = delegate { return true; };
var service = new Service(new Uri("mySplunkURL:8089"));
await service.LogOnAsync("username", "password");

SearchResultStream searchResultStream;
Job job;

job = await service.Jobs.CreateAsync(
"search index=_internal | head 10"
,new JobArgs() { ExecutionMode = ExecutionMode.Blocking });

At this point, I get an error that says
JobArgs does not contain a definition for 'ExecutionMode'
I am following the documentation on the Splunk site, and doing exactly same
https://dev.splunk.com/enterprise/docs/devtools/csharp/sdk-csharp/howdoicsharp2x/howtorunsearches

I don't know what am I missing here? Any help is greatly appreciated !!

Vinay

Re: .net SDK unable to run a blocking search

ksorayya — Thu, 20 May 2021 14:40:08 GMT

Hey;

Did you figure out this issue? I have the same problem.

Re: .net SDK unable to run a blocking search

vinaypradhan — Tue, 14 Jun 2022 13:21:47 GMT

hey yes, this is how I did it.

SearchResultStream searchResultStream;
	Job job;

	//create a job, setting the execution mode to "blocking"
	job = await service.Jobs.CreateAsync("yoursearchstring");

	// print search results
	IEnumerable<SearchResult> myresults;
	using (searchResultStream = await job.GetSearchResultsAsync())
	{
	myresults = searchResultStream.AsEnumerable<SearchResult>();
	foreach (SearchResult result in searchResultStream)
	{
	_time = Convert.ToDateTime(result.GetValue("_time"));
	UserName = result.GetValue("UserName");
	ComputerName = result.GetValue("ComputerName");
	}
	}