access search results for search upon login

[sdewar83]

Hi,

Sorry, a very n00b question and i apologise if this is in the doco but i couldnt find anything in the search doco about it..

Can you kick off a search, log out of splunk and log back in later and get the results? I have long running searches that I'm required to run but our system shuts down RDS sessions unless these is user input after a certain period/if they're left running too long. I had a search running and when i logged back in the next day i can't seem to find away to obtain the results. In such a scenario, are the job and the results lost?

Thanks!

[ivanreis · Accepted solution]

"Send the job to the background. Select this if the search job is slow to complete and you want to you work on other Splunk activities, including running a new search job. The job continues to run in the background."
https://docs.splunk.com/Documentation/Splunk/7.3.2/Search/Aboutjobsandjobmanagement#Job_menu

run your report and when it is running, select the Job/Send the job to the background and type your email. When your report is completed, you will receive an email with a link to access the report results.

[sdewar83]

that looks handy! Thanks!! 🙂