https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-get-an-estimated-job-completion-time-for-a/m-p/117280#M31225 <P>You could <CODE>GET /services/search/jobs/job_id</CODE> to look at the <CODE>doneProgress</CODE> and <CODE>runDuration</CODE> fields. Dividing duration so far by progress so far should give you an estimate for the total duration.<BR /> This will be terribly inaccurate over all time because the progress can't know when the data will stop into the past. It'll also be inaccurate if your data is distributed unevenly across the time range. Lastly, this will not be able to factor in finalization time occurring once <CODE>runDuration</CODE> reaches <CODE>1.0</CODE>.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.2.4/RESTREF/RESTsearch#search.2Fjobs.2F.7Bsearch_id.7D">http://docs.splunk.com/Documentation/Splunk/6.2.4/RESTREF/RESTsearch#search.2Fjobs.2F.7Bsearch_id.7D</A></P> Sun, 12 Jul 2015 15:26:28 GMT martin_mueller 2015-07-12T15:26:28Z https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-get-an-estimated-job-completion-time-for-a/m-p/117279#M31224 <P>Search job Inspector:</P> <PRE><CODE>This search has completed and has returned 31232 results by scanning 434213123 events in 47.204 seconds. </CODE></PRE> <P>Is it possible to estimate a search completion time prior it returns the complete results ? OR possibly an extra column in "Activity -&gt; Jobs" view</P> <P><STRONG>Use case:</STRONG><BR /> Using the REST API, I get search results and displaying them in a customized UI. If I show the user a field called "Estimated Job Completion Time ", the user can wait until the search gets completed or can reduce the time range to get limited results.</P> Sun, 12 Jul 2015 14:28:31 GMT https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-get-an-estimated-job-completion-time-for-a/m-p/117279#M31224 splunker12er 2015-07-12T14:28:31Z https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-get-an-estimated-job-completion-time-for-a/m-p/117280#M31225 <P>You could <CODE>GET /services/search/jobs/job_id</CODE> to look at the <CODE>doneProgress</CODE> and <CODE>runDuration</CODE> fields. Dividing duration so far by progress so far should give you an estimate for the total duration.<BR /> This will be terribly inaccurate over all time because the progress can't know when the data will stop into the past. It'll also be inaccurate if your data is distributed unevenly across the time range. Lastly, this will not be able to factor in finalization time occurring once <CODE>runDuration</CODE> reaches <CODE>1.0</CODE>.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.2.4/RESTREF/RESTsearch#search.2Fjobs.2F.7Bsearch_id.7D">http://docs.splunk.com/Documentation/Splunk/6.2.4/RESTREF/RESTsearch#search.2Fjobs.2F.7Bsearch_id.7D</A></P> Sun, 12 Jul 2015 15:26:28 GMT https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-get-an-estimated-job-completion-time-for-a/m-p/117280#M31225 martin_mueller 2015-07-12T15:26:28Z