Reporting

Job Summary Endpoint "Fatal Error"

New Member

For 95% of my jobs the summary link fails with a fatal error

"No summary is available for this job."

https://172.16.0.122:8089/services/search/jobs/scheduler__nobody__search_VG9wIGZpdmUgc291cmNldHlwZXM...

Can anyone shed any light on this situation?

Tags (2)
0 Karma

Splunk Employee
Splunk Employee

Hi, The summary is used to populate the fileds picker in the search results UI. It does not get populated for all searches, especially when the search is kicked off from the report view or scheduler like above. You can force the scheduler to add the summary info but this is an expensive operation and not recommended. What information are you interested in capturing from the job? Its possible that info already exists in the job overview page. To force your scheduled searches to create summaries add the following line below the search stanza in savedsearches.conf:

dispatch.status_buckets = 1