Reporting

How to specify MapReduce job name in a scheduled search?

blhuynh
Explorer

I have several scheduled searches running on Hunk. However, when I look at a list all applications via yarn, all the jobs submitted by the scheduler appear as an seemingly random alphanumeric string.

If I submit a MapReduce job directly, I can set the MapReduce job name in my code and see the progress and a descriptive name of the job from yarn.

Is there a way to pass in a name for a MapReduce job from the savedsearches.conf file?

0 Karma
1 Solution

rdagan_splunk
Splunk Employee
Splunk Employee

Normally you will see the Hunk job name with this structure: SPLK_HunkHostName_SplunkSearchIdName
For example, job.name=SPLK_sandbox.hortonworks.com_1455796850.4_0

As far as I know the user does not have control regarding the name of the job.

View solution in original post

rdagan_splunk
Splunk Employee
Splunk Employee

Normally you will see the Hunk job name with this structure: SPLK_HunkHostName_SplunkSearchIdName
For example, job.name=SPLK_sandbox.hortonworks.com_1455796850.4_0

As far as I know the user does not have control regarding the name of the job.

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...