I recently restarted Splunk and found that a bunch of jobs return this error when I click on the jobs link. What happened to those jobs?
Splunk's current behavior is that it does not keep track of paused or backgrounded searches after a restart.
View solution in original post
Currently, all child processes die when splunkd goes down. So, no searches will surviv a restart. Please file an ER and provide your usecase if you need this in a future release.
What about jobs that were active? Do any searches survive restart?
And I talk to myself.