Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- access search results for search upon login
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Sorry, a very n00b question and i apologise if this is in the doco but i couldnt find anything in the search doco about it..
Can you kick off a search, log out of splunk and log back in later and get the results? I have long running searches that I'm required to run but our system shuts down RDS sessions unless these is user input after a certain period/if they're left running too long. I had a search running and when i logged back in the next day i can't seem to find away to obtain the results. In such a scenario, are the job and the results lost?
Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
"Send the job to the background. Select this if the search job is slow to complete and you want to you work on other Splunk activities, including running a new search job. The job continues to run in the background."
https://docs.splunk.com/Documentation/Splunk/7.3.2/Search/Aboutjobsandjobmanagement#Job_menu
run your report and when it is running, select the Job/Send the job to the background and type your email. When your report is completed, you will receive an email with a link to access the report results.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
"Send the job to the background. Select this if the search job is slow to complete and you want to you work on other Splunk activities, including running a new search job. The job continues to run in the background."
https://docs.splunk.com/Documentation/Splunk/7.3.2/Search/Aboutjobsandjobmanagement#Job_menu
run your report and when it is running, select the Job/Send the job to the background and type your email. When your report is completed, you will receive an email with a link to access the report results.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
that looks handy! Thanks!! 🙂
Observe and Secure All Apps with Splunk
Splunk Decoded: Business Transactions vs Business IQ
Fastest way to demo Observability
