Splunk Search

access search results for search upon login

sdewar83
Path Finder

Hi,

Sorry, a very n00b question and i apologise if this is in the doco but i couldnt find anything in the search doco about it..

Can you kick off a search, log out of splunk and log back in later and get the results? I have long running searches that I'm required to run but our system shuts down RDS sessions unless these is user input after a certain period/if they're left running too long. I had a search running and when i logged back in the next day i can't seem to find away to obtain the results. In such a scenario, are the job and the results lost?

Thanks!

0 Karma
1 Solution

ivanreis
Builder

"Send the job to the background. Select this if the search job is slow to complete and you want to you work on other Splunk activities, including running a new search job. The job continues to run in the background."
https://docs.splunk.com/Documentation/Splunk/7.3.2/Search/Aboutjobsandjobmanagement#Job_menu

run your report and when it is running, select the Job/Send the job to the background and type your email. When your report is completed, you will receive an email with a link to access the report results.

View solution in original post

0 Karma

ivanreis
Builder

"Send the job to the background. Select this if the search job is slow to complete and you want to you work on other Splunk activities, including running a new search job. The job continues to run in the background."
https://docs.splunk.com/Documentation/Splunk/7.3.2/Search/Aboutjobsandjobmanagement#Job_menu

run your report and when it is running, select the Job/Send the job to the background and type your email. When your report is completed, you will receive an email with a link to access the report results.

0 Karma

sdewar83
Path Finder

that looks handy! Thanks!! 🙂

0 Karma
Get Updates on the Splunk Community!

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...

What’s New in Splunk Cloud Platform 9.1.2308?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2308! Analysts can ...