Deployment Architecture

Paused search-head job available after restarting splunk indexer?

the_wolverine
Champion

I want to confirm whether or not a paused job should continue after an indexer is restarted.

Details: I have a search that is initiated on a search head. If I were to pause that search and restart one or more of my indexers (not the search head), will the search be able to resume where it left off? The search is long running and I want to make sure it will continue where it left off if I were to do this.

Tags (3)
1 Solution

the_wolverine
Champion

I take it the answer is no.

View solution in original post

0 Karma

the_wolverine
Champion

I take it the answer is no.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...