Reporting

How to specify MapReduce job name in a scheduled search?

blhuynh
Explorer

I have several scheduled searches running on Hunk. However, when I look at a list all applications via yarn, all the jobs submitted by the scheduler appear as an seemingly random alphanumeric string.

If I submit a MapReduce job directly, I can set the MapReduce job name in my code and see the progress and a descriptive name of the job from yarn.

Is there a way to pass in a name for a MapReduce job from the savedsearches.conf file?

0 Karma
1 Solution

rdagan_splunk
Splunk Employee
Splunk Employee

Normally you will see the Hunk job name with this structure: SPLK_HunkHostName_SplunkSearchIdName
For example, job.name=SPLK_sandbox.hortonworks.com_1455796850.4_0

As far as I know the user does not have control regarding the name of the job.

View solution in original post

rdagan_splunk
Splunk Employee
Splunk Employee

Normally you will see the Hunk job name with this structure: SPLK_HunkHostName_SplunkSearchIdName
For example, job.name=SPLK_sandbox.hortonworks.com_1455796850.4_0

As far as I know the user does not have control regarding the name of the job.

Get Updates on the Splunk Community!

Blueprints for High-Maturity Operations: Splunk Lantern Articles on SOAR, ES 8.4, ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Simplifying the Analyst Experience with Finding-based Detections

    Splunk invites you to an engaging Tech Talk focused on streamlining security operations with ...

[Puzzles] Solve, Learn, Repeat: Word Search

This challenge was first posted on Slack #puzzles channelThis puzzle is based on a letter grid containing ...