Splunk Search

Is there a way to debug a search to see the process it is taking to produce its results?

coleman07
Path Finder

In a previous question I asked last night. I found weird unexpected results on my search. This begs the question - is there a way to debug a search so I can see the process it is taking to produce its results? It was a search using tag= and not getting any results.

Tags (3)
1 Solution

chanfoli
Builder

The job inspector ( job->inspect ) and the search log (linked to from the job inspector at the bottom) can be helpful in many cases.

View solution in original post

chanfoli
Builder

The job inspector ( job->inspect ) and the search log (linked to from the job inspector at the bottom) can be helpful in many cases.

Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...