How can I find where job is used?

[npletnev]

We have couple of jobs that takes a lot of resources and running very long time. We can't just change or delete it since it might be used for someone's Dashboard or something else.

How can I find which dashboard uses this job's result?

I tried to edit dashboards related by name and searched in code 'loadjob' or 'ref', but there is so many of dashboards, so I can't say exactly that this particular job isn't used.

[gcusello]

Hi npletnev,
have you tried to use the Monitoring Console to find the heaviest searches you have?

Anyway in [Activity -- Jobs] you have the list of all jobs and you can delete all filters and order the list by Runtime: in this way you have the highest jobs and the related searches, so you can know if it's an alert or a scheduled search; for my idea the best approach is Monitoring Console: it solved many problems!

Ciao.
Giuseppe

[npletnev]

Ciao Giuseppe,
Thank you for your message.
I did find the biggest job the way you advised - Activity - Jobs. This is scheduled search, but I need to know what is it working for.
In monitoring console I also found this job as most expensive search, but no additional information about dashboards where this search results might be used.
I'm not very good in Splunk, so if you'll point me where in Monitoring Console I can find it, I be very appreciated.
Have a nice day,
Nik