topic Splunk oneshot returns empty results sometimes in Splunk Search https://community.splunk.com/t5/Splunk-Search/Splunk-oneshot-returns-empty-results-sometimes/m-p/624269#M217046 <P>I am using Python SDK to run Splunk queries at 10 minute interval to collect data for my application. I have nearly 300 queries that I need to run every 10 mins. I have 4 FID to run these 300 queries, so roughly 75 queries for one FID. And I am using ProcessPoolExecutor in Python to only execute 20 at a time so there is no concurrent limit reached issue.</P><P>What I am observing is I get the results sometimes and sometimes I get no data from Splunk but the connection to Splunk was successful and the query gets completed with no errors. Am I reaching any limits here?</P><P>&nbsp;</P><P>&nbsp;</P><LI-CODE lang="python">splunkResultsReaderParameters={ "earliest_time": "-10m", "latest_time": "now" } splunkReader="ResultsReader" oneshotsearch_results = splunkService.jobs.oneshot(query, **splunkParams) reader = results.ResultsReader(oneshotsearch_results)</LI-CODE><P>&nbsp;</P><P>&nbsp;</P> Wed, 14 Dec 2022 17:46:44 GMT ShaneReddy 2022-12-14T17:46:44Z Splunk oneshot returns empty results sometimes https://community.splunk.com/t5/Splunk-Search/Splunk-oneshot-returns-empty-results-sometimes/m-p/624269#M217046 <P>I am using Python SDK to run Splunk queries at 10 minute interval to collect data for my application. I have nearly 300 queries that I need to run every 10 mins. I have 4 FID to run these 300 queries, so roughly 75 queries for one FID. And I am using ProcessPoolExecutor in Python to only execute 20 at a time so there is no concurrent limit reached issue.</P><P>What I am observing is I get the results sometimes and sometimes I get no data from Splunk but the connection to Splunk was successful and the query gets completed with no errors. Am I reaching any limits here?</P><P>&nbsp;</P><P>&nbsp;</P><LI-CODE lang="python">splunkResultsReaderParameters={ "earliest_time": "-10m", "latest_time": "now" } splunkReader="ResultsReader" oneshotsearch_results = splunkService.jobs.oneshot(query, **splunkParams) reader = results.ResultsReader(oneshotsearch_results)</LI-CODE><P>&nbsp;</P><P>&nbsp;</P> Wed, 14 Dec 2022 17:46:44 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-oneshot-returns-empty-results-sometimes/m-p/624269#M217046 ShaneReddy 2022-12-14T17:46:44Z