Splunk Dev

How to set search mode to fast or smart, rather than verbose using Splunk SDK for C#?

welikeaich
New Member

We are programmatically executing Splunk searches via a .NET Framework tool that uses the Splunk SDK for C#. We are running into an issue where the search jobs that are being executed are being run in "verbose" mode and timing out do to the volume of data it is searching through. Increasing the allowed search time for the user is not an option in order to comply with org policies. Is there a way in which to set the search mode to "fast" or even "smart" rather than "verbose"?

At the moment I am starting search jobs via the Service.Jobs.CreateAsync() method.

Thanks in advance.

Labels (1)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...