Splunk Search
Highlighted

Is there a way to debug a search to see the process it is taking to produce its results?

Communicator

In a previous question I asked last night. I found weird unexpected results on my search. This begs the question - is there a way to debug a search so I can see the process it is taking to produce its results? It was a search using tag= and not getting any results.

Tags (3)
Highlighted

Re: Is there a way to debug a search to see the process it is taking to produce its results?

Builder

The job inspector ( job->inspect ) and the search log (linked to from the job inspector at the bottom) can be helpful in many cases.

View solution in original post