Skip to content

Search job user context#20

Open
baristaTam wants to merge 3 commits into
mainfrom
SearchJob-UserContext
Open

Search job user context#20
baristaTam wants to merge 3 commits into
mainfrom
SearchJob-UserContext

Conversation

@baristaTam
Copy link
Copy Markdown
Contributor

[1.1.7] - 2026-05-28

Changed

  • Export-SplunkData & Update-SplunkLookup:
    • Updated Splunk REST search job creation to use the shared app namespace (servicesNS/nobody/) instead of the authenticated user namespace. This avoids severe latency caused by user-specific namespace resolution while preserving app-context search behavior.

rdonovan92
rdonovan92 previously approved these changes May 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants