Hi,
I am new to Splunk. Trying to understanding the scheduled saved reports. What will be the output of scheduled saved reports? will it returns a fresh results or returns the last time the report what I was saved?
Thanks,
Chandana
The output of a scheduled search/report is a set of search artifacts
including search results
that are related to a search SID
job ID that will live for TTL
(Time To Live) seconds before being automatically reaped. You can access the results from the Search Head GUI and REST API from the Jobs
area or from the Searches, Reports and Alerts
area with the View recent results
link. You can access them programmatically with the loadjob
command.