Back end query to pull the active searches running in Search Head

[anandhalagarasa]

I want to check what are the searches which are running currently or which are finalizing or which is done via our back-end Search head server which is an Unix machine.

So Is there any back end command to pull those sort of information?

[MuS]

Hi anandhalagarasan,

before you try to re-invet the wheel, have a look at the docs http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview of the integrated Monitoring Console. It will provide a lot of prebuilt searches, dashboards about search activities and a lot more.

Hope this helps ...

cheers, MuS

[anandhalagarasa]

Can anyone help on this request.

[aakwah]

/opt/splunk/bin/splunk search '| rest /services/search/jobs'

[anandhalagarasa]

Thanks. But how long will it take to pull the report at the back end. Since I have initiated the query some 3 minutes before but still now I couldn't able to get the output also I want to know whether this command wont delete any searches?

[aakwah]

Welcome, sorry I don't have more details ..