Splunk - Get Search Job by ID
Details
This atomic belongs to the Splunk atomic group.
This atomic allows you to get information about a previously executed search job from Splunk Cloud or Splunk Enterprise.
Target: Splunk Cloud or Splunk Enterprise integration target
Steps:
- Fetch the search job details
- Check if the request was successful:
- If it was, attempt to extract Search Job data and set output results
- If it wasn't, output an error
More information about this API for Splunk Cloud: https://docs.splunk.com/Documentation/SplunkCloud/latest/RESTREF/RESTsearch#search.2Fjobs.2F.7Bsearch_id.7D
More information about this API for Splunk Enterprise: https://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTsearch#search.2Fjobs.2F.7Bsearch_id.7D
About
Authorship
Cisco Managed