search artifact

search artifact

noun

The results and associated metadata from a completed search job.

You can inspect the artifact of a search job in the Job Inspector and the Jobs page in Splunk Web. Artifacts are stored in the dispatch directory in $SPLUNK_HOME$/var/run/splunk/dispatch/.

For more information

In the Search Manual

• Dispatch directory and search artifacts
• Manage search jobs
• Inspect search job properties

In Distributed Search:

• Artifact replication

In the Troubleshooting Manual:

• What Splunk software logs about itself