Splunk Search

When running a search in Splunk 6.2.6, why do results not display and I only see the message "Finalizing job..."?

rakesh_498115
Motivator

Hi Team.

I am using SPLUNK version 6.2.6 and when I run my search in search app, I could see it's executing for a while and then it pops up a "Finalizing job... " message and not finalizing the search results.

Is it a bug in SPLUNK 6.2.6? I am not able view any search results because of this.

Please find the screen shot for the same.
alt text

0 Karma

jkat54
SplunkTrust
SplunkTrust

Sometimes it can take a long time to finalize the results. You might want to turn "preview" off to help speed things up. That and further optimize your search.

0 Karma

rakesh_498115
Motivator

but i am trying to run the search the one day window and its hanging on the finalize screen....didnt see this behaviour in older versions of splunk.

0 Karma
Get Updates on the Splunk Community!

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...