Hello Splunk experts
I'm trying to figure out what the best way to get a jobID or monitor job status for a search executed via the Splunk Web UI which is then piped |
to my custom command. I'd like to ensure I am working with completed data/results, so I'm trying to do something similar to the below, which I usually do when kicking-off jobs directly from the API. I am not sure how to pull job status/job id information for a job that is being executed within the UI then piped | to a custom command.
while not job.is_done():
sleep(.2)
Sample of what my search would look like
index=_internal
|eval x=blah
|stats count by x, y
| table y
| customCommandHere