Reporting

Are scheduled searches run in background? What is the runtime limit for them?

TiagoTLD1
Communicator

Hi

I am facing some issues with the time the jobs can run.

Are scheduled searches run in background? What is the runtime limit for them?

Thanks

0 Karma
1 Solution

rjthibod
Champion

Yes, scheduled searches are run in the background based on their scheduling configuration.

I don't think there is an inherit limit on how long a search can take, but there are limits on how long sub-searches and specific commands can take before being auto-finalized.

Peruse http://docs.splunk.com/Documentation/Splunk/6.5.2/Admin/Limitsconf for specific entries that may apply to your saved searches.

View solution in original post

rjthibod
Champion

Yes, scheduled searches are run in the background based on their scheduling configuration.

I don't think there is an inherit limit on how long a search can take, but there are limits on how long sub-searches and specific commands can take before being auto-finalized.

Peruse http://docs.splunk.com/Documentation/Splunk/6.5.2/Admin/Limitsconf for specific entries that may apply to your saved searches.

View solution in original post

rjthibod
Champion

What do you mean by "runtime limit"? Do you mean is there a limit to how long they can take before failing?

Yes, scheduled searches are run in the background based on their scheduling configuration.

0 Karma

TiagoTLD1
Communicator

Yes that is actually what I mean

Do scheduled sabed searches might not finish due to taking too long?

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!