Getting Data In

Extending job lifetime via REST

Explorer

Is there a way the extend the lifetime of a job via REST like you can via UI ?

https://docs.splunk.com/Documentation/Splunk/8.0.0/Search/Extendjoblifetimes

I have the problem that the job expires before I can download the data 😞

Markus

0 Karma
1 Solution

SplunkTrust
SplunkTrust
0 Karma

SplunkTrust
SplunkTrust
0 Karma

Explorer

Sorry, but I still don't see how I can change it. i.e. is the custom.ttl ?

Thank you
Markus

0 Karma

Explorer

After a bit more digging I found it . Thank you.

It is

curl -k -u admin:pass https://localhost:8089/services/search/jobs/mysearch_02151949/control -d action=setttl -d ttl=86400

Markus

0 Karma