Splunk Python SDK: What are the default values for search parameters (e.g. max time)?

[rajiv_abraham]

Hi,

Great documentation at:
http://dev.splunk.com/view/python-sdk/SP-CAAAEE5#getcollparams

I'd like to know what is the default value for max_time? Do I have to specify it as 0 or is it the default?

Thanks,
Rajiv

[jkat54 · Accepted solution]

You're just making calls to the API here so follow the details on the RESTREF:

http://docs.splunk.com/Documentation/Splunk/6.4.2/RESTREF/RESTsearch#search.2Fjobs

max_time defaults to 0

I had to look pretty hard for it but it's there under this:

http://docs.splunk.com/Documentation/Splunk/6.4.2/RESTREF/RESTsearch#POST_search.2Fjobs_method_detai...

I found it by looking for "The number of seconds to run this search before finalizing. " which was on the table in the link you provided.

There were many matches for "max_time".

[rajiv_abraham]

Thanks Michael! My only uncertainty is that I am using a one-shot search and the documentation in the link posted by me says that it does not create or return a job while the documentation link that you provide is for search jobs. However, I think your answer may still be correct.

[jkat54]

Yeah it should go to the same endpoint regardless.