Splunk Search

How can I get CLI searches to appear in the Job Manager?

the_wolverine
Champion

It looks like the Job Manager currently does not allow me to track CLI searches. Is there some way I can get a jobid assigned to my CLI searches?

Tags (3)
1 Solution

the_wolverine
Champion

By default, even CLI-initiated searches are assigned a Job id. Unfortunately, these disappear immediately upcome completion of the search run. To make the Job id persist you can add '-detach true' to your search:

[/opt/splunk/bin] ./splunk search "search terms" -maxout 100000 -detach true

Job id: 1277828645.277

View solution in original post

the_wolverine
Champion

By default, even CLI-initiated searches are assigned a Job id. Unfortunately, these disappear immediately upcome completion of the search run. To make the Job id persist you can add '-detach true' to your search:

[/opt/splunk/bin] ./splunk search "search terms" -maxout 100000 -detach true

Job id: 1277828645.277

bwooden
Splunk Employee
Splunk Employee

It showed in my jobs manager on Splunk 4.1 (build 77833)

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...