Splunk Search

At the beginning of the search, the Search Inspector indicated that the cursorTime in the year 2038. What does this mean?

rsimmons
Splunk Employee
Splunk Employee

The Search Inspector indicated that the cursorTime in the year 2038. What does this mean?

example from search job inspector: cursorTime 2038-10-28T10:19:44.000-07:00

Tags (2)

rsimmons
Splunk Employee
Splunk Employee

The cursorTime at 2038 is an artifact of not having eliminated any buckets yet.

Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!