Objective 12.2

Enterprise Certified Architect

Job inspector

Objective 12.2 sits in Search Problems, which carries 5% of the Enterprise Certified Architect exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

12-2Search Problems

An engineer asks when a job can be inspected. What does Splunk say?

Until the job expiresCorrect · your answerCorrect.
Only while it is runningA finished search can still be inspected.
Only after it finishesA running search can be inspected too.
Only if it was scheduledAd hoc and scheduled jobs both leave artifacts.

Correct.

Checked against help.splunk.com, August 2026

Concept

The inspector reads the artifact a search leaves behind, so availability follows the artifact's lifetime. Extending a job's lifetime is worth doing before investigating.

Why A

Splunk states that you can access the Search Job Inspector as long as the search job has not expired, meaning the search artifact still exists, and that the search does not need to be running.

Source

You can access the Search Job Inspector for a search job, as long as the search job has not expired (which means that the search artifact still exists). The search does not need to be running to access the Search Job Inspector.

Splunk Docs: View search job properties, checked August 2026
#troubleshooting#job-inspector

Now you: objective 12.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

12-2Search Problems

An administrator asks what else the Job Inspector explains. What does Splunk say?

Sample question 2 of 3

12-2Search Problems

An analyst asks what the Job Details dashboard shows. What does Splunk say?

Sample question 3 of 3

12-2Search Problems

A team lead asks how to find the logs for one specific search. What does Splunk say audit.log gives?

Full Enterprise Certified Architect question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Search Problems