send to background

verb

The act of making a currently running search run "in the background" while you work on other projects in the "foreground" of the Search view. Splunk gives you a notification when a backgrounded search is complete. You can use the Jobs page to access backgrounded searches and review their results.

You can background a search when you are running a search in the Search view by selecting Send to background after you launch a search (but before it completes or is finalized).

For more information

In the User Manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time