Where can I find the "Created at" field from the "Job Manager"

[andrewtrobec]

Hello,
I have managed to locate the jobs within the Job Manager through the following search:

| rest /services/search/jobs

The only problem is that I cannot find the Created at column on the Job Manager within the result set. There is an Updated column, but this value is sometimes in the past, specifically for saved searches.

Where can I find the data that I'm looking for?

Thanks!

Andrew

[codebuilder]

[codebuilder · Accepted solution]

It's a little misleading, but the column you're looking for is "published"

| rest splunk_server=local count=0 /services/search/jobs
| table reportSearch published

[andrewtrobec]

@codebuilder Yup, that's the one! Awesome, thank you.

[codebuilder]

Glad to help.