Developing for Splunk Enterprise

How to set search mode to fast or smart, rather than verbose using Splunk SDK for C#?

welikeaich
New Member

We are programmatically executing Splunk searches via a .NET Framework tool that uses the Splunk SDK for C#. We are running into an issue where the search jobs that are being executed are being run in "verbose" mode and timing out do to the volume of data it is searching through. Increasing the allowed search time for the user is not an option in order to comply with org policies. Is there a way in which to set the search mode to "fast" or even "smart" rather than "verbose"?

At the moment I am starting search jobs via the Service.Jobs.CreateAsync() method.

Thanks in advance.

Labels (1)
Tags (3)
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!