124k views
5 votes
How long does the Splunk search job remain active

1 Answer

3 votes
When you run a new search job, the job is retained in the system for a period of time, called the job lifetime. f the job is not accessed within the specified lifetime, the job expires and is removed from the system. There are two lifetime settings, 10 minutes and 7 days. The lifetime starts from the moment the job is run.
User Andrey Yasinishyn
by
6.5k points