Splunk Dev

How to set search mode to fast or smart, rather than verbose using Splunk SDK for C#?

welikeaich
New Member

We are programmatically executing Splunk searches via a .NET Framework tool that uses the Splunk SDK for C#. We are running into an issue where the search jobs that are being executed are being run in "verbose" mode and timing out do to the volume of data it is searching through. Increasing the allowed search time for the user is not an option in order to comply with org policies. Is there a way in which to set the search mode to "fast" or even "smart" rather than "verbose"?

At the moment I am starting search jobs via the Service.Jobs.CreateAsync() method.

Thanks in advance.

Labels (1)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...