I made a big POST(REST API) request to "services/search/jobs" by collect with index and marker, it will return a sid. The job is taking too long(> 6hrs). I know I can query the status by /services/search/jobs/${sid}. But it cannot provide more information for debugging. How can I get this job's log file(/var/log/splunk/searchs.log etc ) from client?
Hi,
Did you search index=_internal
logs for that client?