Career Resources
Post your Splunk jobs. Get career tips!

Jobs Expire

khanhnghi29
New Member

My splunk has a problem: some jobs have a status of done but 100 days later they expire and disappear. This causes reduced performance. I had to manually delete jobs on the web interface, but this took a lot of time, because in just a month, there are up to 12000 jobs with done status.
Is there any way I can configure jobs to expire 10 days after entering the done status ?
Thanks

0 Karma

dural_yyz
Motivator

Most jobs should expire quickly especially saved searches which is usually twice their reoccurrence rate.  Users can set to save their jobs for various periods but typically under a week.  If the system is deciding to keep your jobs present for 100 days then I would be interested to know which version of Splunk you are running.  Perhaps an upgrade is in your future.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...