Hi, I have the same problem.
I've updated the search to be search index=alfa | fields field1, field2 . Also tried adding the rf field in search_kwargs , but still these fields are not returned, so my search returns no results (although there are of course results).
The code looks like this:
search_kwargs = {
"exec_mode": "normal",
"earliest_time": "-8d",
"latest_time": "now",
"search_mode": "normal",
"rf": ["field1", "field2"],
}
search = "search index=alfa | fields field1, field2"
job = jobs.create(search, **search_kwargs)
# Then pool for job completion, and list results....
... View more