I want to check what are the searches which are running currently or which are finalizing or which is done via our back-end Search head server which is an Unix machine.
So Is there any back end command to pull those sort of information?
Hi anandhalagarasan,
before you try to re-invet the wheel, have a look at the docs http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview of the integrated Monitoring Console
. It will provide a lot of prebuilt searches, dashboards about search activities and a lot more.
Hope this helps ...
cheers, MuS
Can anyone help on this request.
/opt/splunk/bin/splunk search '| rest /services/search/jobs'
Thanks. But how long will it take to pull the report at the back end. Since I have initiated the query some 3 minutes before but still now I couldn't able to get the output also I want to know whether this command wont delete any searches?
Welcome, sorry I don't have more details ..