All Apps and Add-ons

JAVA-SDK Summary

srirammk90
New Member

Hi,

I have created a saved search and now i want to schedule it and run summary indexing on it using JAVA SDK....?

How do i do it....?

Tags (1)
0 Karma

fross_splunk
Splunk Employee
Splunk Employee

You can schedule a saved search by calling the setScheduled and setCronSchedule methods on it, and then calling update, as in:

savedSearch.setIsScheduled(true); 
savedSearch.setCronSchedule("15 4 * * 6"); 
// Update the server with changes
savedSearch.update();

This example is taken from the SDK documentation.

For setting up summary indexing you would have to write code to edit the configuration files via the REST API. I would set up summary indexing on an example saved search, then translate it into calls to the collection returned by Service.getConfs.

If you're using Splunk 5.0 or later, it would be better to use report acceleration, but we haven't documented the REST endpoints for controlling that yet. I've let the docs team know of that oversight.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...