I read this but this was almost two years ago:
http://splunk-base.splunk.com/answers/49/does-each-splunk-event-have-a-unique-identifier
Is there any way to retrieve a particular event with one or some of the fields returned from 'search/jobs/export'
Thanks
Calvin
Is this what you're asking for?
index=awesome sourcetype=woah
rename _cd as unique_id
| search unique_id=9320:49207386
hey, i join on this question, any update?