Splunk Dev

Java SDK - How to Save a Job

cbauza
Engager

I am running a Job and retrieving datas over 1 Gb.

What happpens is that the job expires before I have time to load all the datas.

Is there a way to save the job using the API or increase the time before the job expires ?

Tags (3)
0 Karma

ziegfried
Influencer

You can use the job.touch() method to keep the job alive for the given ttl (time to live) or modify the ttl by using job.setttl(<ttl in seconds>).

"Touching" the job every few thousand events might be a good idea. Additionally, using job.cancel()when you've finished processing the results can be used to remove the job.

job.setttl(86400);
processEvents(job);
job.cancel();

ineeman
Splunk Employee
Splunk Employee
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Maximizing the Value of Splunk ES 8.x

Splunk Enterprise Security (ES) continues to be a leader in the Gartner Magic Quadrant, reflecting its pivotal ...

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Optimizing SOC workflows with a unified, risk-based approach to Threat Detection, Investigation, and Response ...

Introducing .conf Stories Series!

“.conf Stories” Series – First Feature: Rich Mahlerwein   Every year .conf brings together some of the most ...