question on loadjob command

[jip31]

hi

I use loadjob command in my dashboard
they are scheduled every hour
if i want to have date displayed im forced to go in my dashboard before the schedule occurs, i have to wait for the schedule and after to refresh the dashboard in order to have data
at the beginning i have the message "Cannot find artifacts"

| loadjob savedsearch="admin:FO_Workstations_Monitoring:FO_EventServiceLog_Serv5" 

what I have to do please??

[nikita_p · Accepted solution]

Hi,
You can try the search mentioned below:
|loadjob [rest /services/saved/searches/mysearchname/history splunk_server=local |where isDone==1 |eventstats max(ttl) as maxttl |where ttl==maxttl |return $title]

Also PFB link on splunk answers, they have explained what all are the possibilities of these error you are facing. This might help you.
https://answers.splunk.com/answers/318096/why-am-i-getting-loadjob-error-cannot-find-artifac.html

[jip31]

thanks nikita!

[niketn]

@jip31 if your issue is resolved, please accept the answer to mark this question as resolved!