https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-search-query-from-a-search-sid-using-restful-API/m-p/545794#M5425 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/195461">@patng_nw</a>&nbsp;<BR /><BR />Use below spl query and add necessary sid then request.search will provide the required <STRONG>search query string</STRONG></P><LI-CODE lang="markup">| rest /services/search/jobs/&lt;sid&gt;| table sid title eai:acl.app eai:acl.owner request.search</LI-CODE><P>&nbsp;<BR /><BR /><BR />-----------------------------------------------------------------------------------------------------------------------------------<BR />If this reply helps do upvote the answer.</P> Mon, 29 Mar 2021 04:45:00 GMT 493669 2021-03-29T04:45:00Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-search-query-from-a-search-sid-using-restful-API/m-p/545792#M5424 <P class="lia-align-left">I have a search SID, and currently I am getting its result using the API api/search/jobs/&lt;sid&gt;/results</P><P class="lia-align-left">However, I also need to access the <STRONG>search query string</STRONG> behind this search result.&nbsp; Is there an API for getting that?</P> Mon, 29 Mar 2021 04:07:31 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-search-query-from-a-search-sid-using-restful-API/m-p/545792#M5424 patng_nw 2021-03-29T04:07:31Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-search-query-from-a-search-sid-using-restful-API/m-p/545794#M5425 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/195461">@patng_nw</a>&nbsp;<BR /><BR />Use below spl query and add necessary sid then request.search will provide the required <STRONG>search query string</STRONG></P><LI-CODE lang="markup">| rest /services/search/jobs/&lt;sid&gt;| table sid title eai:acl.app eai:acl.owner request.search</LI-CODE><P>&nbsp;<BR /><BR /><BR />-----------------------------------------------------------------------------------------------------------------------------------<BR />If this reply helps do upvote the answer.</P> Mon, 29 Mar 2021 04:45:00 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-search-query-from-a-search-sid-using-restful-API/m-p/545794#M5425 493669 2021-03-29T04:45:00Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-search-query-from-a-search-sid-using-restful-API/m-p/545795#M5426 <P>It works.&nbsp; Thanks a lot!</P> Mon, 29 Mar 2021 04:53:32 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-search-query-from-a-search-sid-using-restful-API/m-p/545795#M5426 patng_nw 2021-03-29T04:53:32Z