Splunk Dev

How to set search mode to fast or smart, rather than verbose using Splunk SDK for C#?

welikeaich
New Member

We are programmatically executing Splunk searches via a .NET Framework tool that uses the Splunk SDK for C#. We are running into an issue where the search jobs that are being executed are being run in "verbose" mode and timing out do to the volume of data it is searching through. Increasing the allowed search time for the user is not an option in order to comply with org policies. Is there a way in which to set the search mode to "fast" or even "smart" rather than "verbose"?

At the moment I am starting search jobs via the Service.Jobs.CreateAsync() method.

Thanks in advance.

Labels (1)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...