By default, how long does Splunk retain a search job?
By default, how long does Splunk retain a search job?
By default, Splunk retains a search job for 10 minutes. This is the standard configuration to ensure that temporary search results do not consume excessive system resources. After this period, the search job and its associated data are automatically removed unless explicitly extended by the user.
A For Sure
https://docs.splunk.com/Documentation/Splunk/8.2.3/Search/Aboutjobsandjobmanagement under "Default lifetimes for unscheduled searches" states, "the resulting search job has a default lifetime of 10 minutes." therefore A - 10 mins should be the correct answer
Lifetime 10min (page 69)
Job default Lifetime is 10 minutes, https://docs.splunk.com/Documentation/Splunk/8.2.3/Search/Aboutjobsandjobmanagement
is ok - https://docs.splunk.com/Documentation/Splunk/8.2.3/Search/Aboutjobsandjobmanagement
10 min is the correct answer
Ans A 10 mins reference link : https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes