Details

This atomic belongs to the Splunk atomic group.

This atomic allows you to get information about a previously executed search job from Splunk Cloud or Splunk Enterprise.

Target: Splunk Cloud or Splunk Enterprise integration target

Steps:

  • Fetch the search job details
  • Check if the request was successful:
    • If it was, attempt to extract Search Job data and set output results
    • If it wasn't, output an error

More information about this API for Splunk Cloud: https://docs.splunk.com/Documentation/SplunkCloud/latest/RESTREF/RESTsearch#search.2Fjobs.2F.7Bsearch_id.7D

More information about this API for Splunk Enterprise: https://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTsearch#search.2Fjobs.2F.7Bsearch_id.7D

About
Authorship
Cisco Managed