Splunk Search

Where can I find the "Created at" field from the "Job Manager"

andrewtrobec
Motivator

Hello,
I have managed to locate the jobs within the Job Manager through the following search:

| rest /services/search/jobs

The only problem is that I cannot find the Created at column on the Job Manager within the result set. There is an Updated column, but this value is sometimes in the past, specifically for saved searches.

Where can I find the data that I'm looking for?

Thanks!

Andrew

0 Karma
1 Solution

codebuilder
SplunkTrust
SplunkTrust

It's a little misleading, but the column you're looking for is "published"

| rest splunk_server=local count=0 /services/search/jobs
| table reportSearch published
----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

codebuilder
SplunkTrust
SplunkTrust

alt text

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

codebuilder
SplunkTrust
SplunkTrust

It's a little misleading, but the column you're looking for is "published"

| rest splunk_server=local count=0 /services/search/jobs
| table reportSearch published
----
An upvote would be appreciated and Accept Solution if it helps!

andrewtrobec
Motivator

@codebuilder Yup, that's the one! Awesome, thank you.

0 Karma

codebuilder
SplunkTrust
SplunkTrust

Glad to help.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...