Is there a way the extend the lifetime of a job via REST like you can via UI ?
https://docs.splunk.com/Documentation/Splunk/8.0.0/Search/Extendjoblifetimes
I have the problem that the job expires before I can download the data 😞
Markus
Sorry, but I still don't see how I can change it. i.e. is the custom.ttl ?
Thank you
Markus
After a bit more digging I found it . Thank you.
It is
curl -k -u admin:pass https://localhost:8089/services/search/jobs/mysearch_02151949/control -d action=setttl -d ttl=86400
Markus