https://community.splunk.com/t5/Splunk-Dev/using-python-SDK-how-to-retrive-the-action-items-on-a-splunk/m-p/571164#M10145 <P>Use the SDK to send this REST command</P><LI-CODE lang="markup">| rest /servicesNS/-/-/saved/searches/CPU%20Utilization splunk_server=local </LI-CODE><P>The fields you want to look for in the response are&nbsp;cron_schedule and action.*</P> Fri, 15 Oct 2021 20:10:40 GMT richgalloway 2021-10-15T20:10:40Z https://community.splunk.com/t5/Splunk-Dev/using-python-SDK-how-to-retrive-the-action-items-on-a-splunk/m-p/571161#M10144 <P>hi Team, is it possible to retrive the action items present on an alert based on the alert name using python SDK</P><P>Example i know i have an alert by the name which skipped&nbsp;</P><P>using that name i can retrive the query that is used. but wondering if i can retrive the action on the alert (like the webhook or the emails to which it is sent, and the cron schedule)</P> Fri, 15 Oct 2021 19:33:37 GMT https://community.splunk.com/t5/Splunk-Dev/using-python-SDK-how-to-retrive-the-action-items-on-a-splunk/m-p/571161#M10144 masmi99 2021-10-15T19:33:37Z https://community.splunk.com/t5/Splunk-Dev/using-python-SDK-how-to-retrive-the-action-items-on-a-splunk/m-p/571164#M10145 <P>Use the SDK to send this REST command</P><LI-CODE lang="markup">| rest /servicesNS/-/-/saved/searches/CPU%20Utilization splunk_server=local </LI-CODE><P>The fields you want to look for in the response are&nbsp;cron_schedule and action.*</P> Fri, 15 Oct 2021 20:10:40 GMT https://community.splunk.com/t5/Splunk-Dev/using-python-SDK-how-to-retrive-the-action-items-on-a-splunk/m-p/571164#M10145 richgalloway 2021-10-15T20:10:40Z