Splunk Search

When running a search in Splunk 6.2.6, why do results not display and I only see the message "Finalizing job..."?

rakesh_498115
Motivator

Hi Team.

I am using SPLUNK version 6.2.6 and when I run my search in search app, I could see it's executing for a while and then it pops up a "Finalizing job... " message and not finalizing the search results.

Is it a bug in SPLUNK 6.2.6? I am not able view any search results because of this.

Please find the screen shot for the same.
alt text

0 Karma

jkat54
SplunkTrust
SplunkTrust

Sometimes it can take a long time to finalize the results. You might want to turn "preview" off to help speed things up. That and further optimize your search.

0 Karma

rakesh_498115
Motivator

but i am trying to run the search the one day window and its hanging on the finalize screen....didnt see this behaviour in older versions of splunk.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...