All Apps and Add-ons

JAVA-SDK Summary

srirammk90
New Member

Hi,

I have created a saved search and now i want to schedule it and run summary indexing on it using JAVA SDK....?

How do i do it....?

Tags (1)
0 Karma

fross_splunk
Splunk Employee
Splunk Employee

You can schedule a saved search by calling the setScheduled and setCronSchedule methods on it, and then calling update, as in:

savedSearch.setIsScheduled(true); 
savedSearch.setCronSchedule("15 4 * * 6"); 
// Update the server with changes
savedSearch.update();

This example is taken from the SDK documentation.

For setting up summary indexing you would have to write code to edit the configuration files via the REST API. I would set up summary indexing on an example saved search, then translate it into calls to the collection returned by Service.getConfs.

If you're using Splunk 5.0 or later, it would be better to use report acceleration, but we haven't documented the REST endpoints for controlling that yet. I've let the docs team know of that oversight.

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...