Reporting

How to specify MapReduce job name in a scheduled search?

blhuynh
Explorer

I have several scheduled searches running on Hunk. However, when I look at a list all applications via yarn, all the jobs submitted by the scheduler appear as an seemingly random alphanumeric string.

If I submit a MapReduce job directly, I can set the MapReduce job name in my code and see the progress and a descriptive name of the job from yarn.

Is there a way to pass in a name for a MapReduce job from the savedsearches.conf file?

0 Karma
1 Solution

rdagan_splunk
Splunk Employee
Splunk Employee

Normally you will see the Hunk job name with this structure: SPLK_HunkHostName_SplunkSearchIdName
For example, job.name=SPLK_sandbox.hortonworks.com_1455796850.4_0

As far as I know the user does not have control regarding the name of the job.

View solution in original post

rdagan_splunk
Splunk Employee
Splunk Employee

Normally you will see the Hunk job name with this structure: SPLK_HunkHostName_SplunkSearchIdName
For example, job.name=SPLK_sandbox.hortonworks.com_1455796850.4_0

As far as I know the user does not have control regarding the name of the job.

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...