By default, how long does Splunk retain a search job?
By default, how long does Splunk retain a search job?
By default, Splunk retains a search job for 10 minutes. This is the standard configuration to ensure that temporary search results do not consume excessive system resources. After this period, the search job and its associated data are automatically removed unless explicitly extended by the user.
https://docs.splunk.com/Documentation/Splunk/8.2.3/Search/Aboutjobsandjobmanagement under "Default lifetimes for unscheduled searches" states, "the resulting search job has a default lifetime of 10 minutes." therefore A - 10 mins should be the correct answer
A For Sure
Ans A 10 mins reference link : https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes
10 min is the correct answer
is ok - https://docs.splunk.com/Documentation/Splunk/8.2.3/Search/Aboutjobsandjobmanagement
Job default Lifetime is 10 minutes, https://docs.splunk.com/Documentation/Splunk/8.2.3/Search/Aboutjobsandjobmanagement
Lifetime 10min (page 69)