On this Page
|Table of Contents|
This Snap executes a saved search query and retrieves data from Splunk using the Splunk REST API. The Snap can be configured to define polling intervals in which the Snap looks for the status of the search and if the time taken to retrieve the search exceeds a configurable timeout limit, an exception will be thrown.
|Support and limitations:||Ultra pipelines: Works in Ultra Pipelines.Spark mode: Not supported in Spark modeTask Pipelines.|
|Required. The name for the Snap. You can modify this to be more specific, especially if you have more than one of the same Snap in your pipeline.|
Saved search name
Required. A saved search is a search query that has been saved in Splunk. All saved searches will be listed if you click on the Suggest button in the property.
Example: License Usage Data Cube
Default value: [None]
Required. This property lets you define the polling interval in seconds while waiting for the completion of the search execution. At each polling interval, the Snap checks the status of the search execution.
Default value: 5
Maximum value: 60
Required. This property lets you define the polling timeout in seconds while waiting for the completion of the search execution. If the timeout occurs while waiting for the completion of the search execution, the Snap throws an exception.
Default value: 300
Minimum value: 10