Splunk Dev

How to set search mode to fast or smart, rather than verbose using Splunk SDK for C#?

welikeaich
New Member

We are programmatically executing Splunk searches via a .NET Framework tool that uses the Splunk SDK for C#. We are running into an issue where the search jobs that are being executed are being run in "verbose" mode and timing out do to the volume of data it is searching through. Increasing the allowed search time for the user is not an option in order to comply with org policies. Is there a way in which to set the search mode to "fast" or even "smart" rather than "verbose"?

At the moment I am starting search jobs via the Service.Jobs.CreateAsync() method.

Thanks in advance.

Labels (1)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...