Splunk Search

How can I get CLI searches to appear in the Job Manager?

the_wolverine
Champion

It looks like the Job Manager currently does not allow me to track CLI searches. Is there some way I can get a jobid assigned to my CLI searches?

Tags (3)
1 Solution

the_wolverine
Champion

By default, even CLI-initiated searches are assigned a Job id. Unfortunately, these disappear immediately upcome completion of the search run. To make the Job id persist you can add '-detach true' to your search:

[/opt/splunk/bin] ./splunk search "search terms" -maxout 100000 -detach true

Job id: 1277828645.277

View solution in original post

the_wolverine
Champion

By default, even CLI-initiated searches are assigned a Job id. Unfortunately, these disappear immediately upcome completion of the search run. To make the Job id persist you can add '-detach true' to your search:

[/opt/splunk/bin] ./splunk search "search terms" -maxout 100000 -detach true

Job id: 1277828645.277

bwooden
Splunk Employee
Splunk Employee

It showed in my jobs manager on Splunk 4.1 (build 77833)

Get Updates on the Splunk Community!

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...

Enterprise Security Content Update (ESCU) | New Releases

In October, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Monitoring MariaDB and MySQL

In a previous post, we explored monitoring PostgreSQL and general best practices around which metrics to ...