<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: accessing saved report data in json/xml from Splunk RESTful API in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/accessing-saved-report-data-in-json-xml-from-Splunk-RESTful-API/m-p/62932#M12601</link>
    <description>&lt;P&gt;OK. Thanks. I was just trying to access the report/saved search via the browser, not curl or php or whatever. Can this not be done just as a quick proof of concept? I found the saved search, not report, from your information above. However, it apepars that that is just to see the configuration or delete it or whatever. I just want the search's output. So I saw this-&amp;gt;search/search/jobs/export/ . . . I just don't know how to feed it my search string. I see that your documentation provides Curl examples. But again I just want to do this in a browser with a http request.&lt;/P&gt;</description>
    <pubDate>Thu, 13 Jun 2013 17:05:46 GMT</pubDate>
    <dc:creator>tommyp1972</dc:creator>
    <dc:date>2013-06-13T17:05:46Z</dc:date>
    <item>
      <title>accessing saved report data in json/xml from Splunk RESTful API</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/accessing-saved-report-data-in-json-xml-from-Splunk-RESTful-API/m-p/62930#M12599</link>
      <description>&lt;P&gt;I have tried to access a saved report through a browser URL using Splunk's RESTful API. I cannot seem to accomplish this. I am using my_domain:8089/servicesNS/my_user/my_app/ but from there I am lost. Where are the reports in the endpoints? I can't find anything in the documentation. I am using Splunk 4.3.6&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 14:05:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/accessing-saved-report-data-in-json-xml-from-Splunk-RESTful-API/m-p/62930#M12599</guid>
      <dc:creator>tommyp1972</dc:creator>
      <dc:date>2020-09-28T14:05:09Z</dc:date>
    </item>
    <item>
      <title>Re: accessing saved report data in json/xml from Splunk RESTful API</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/accessing-saved-report-data-in-json-xml-from-Splunk-RESTful-API/m-p/62931#M12600</link>
      <description>&lt;P&gt;All the end points are available on Splunk docs at &lt;A href="http://docs.splunk.com/Documentation/Splunk/4.3.6/RESTAPI/RESTlist"&gt;http://docs.splunk.com/Documentation/Splunk/4.3.6/RESTAPI/RESTlist&lt;/A&gt;. A couple that you might find useful from this list - &lt;CODE&gt; saved/searches/{name}&lt;/CODE&gt; and &lt;CODE&gt; search/jobs/{search_id}/results&lt;/CODE&gt;.&lt;/P&gt;

&lt;P&gt;We also have SDKs in 6 different languages. They make it much easier to hit these endpoints and get data from searches and reports from Splunk. You can can find more about the SDKs at &lt;A href="http://dev.splunk.com/view/sdks/SP-CAAADP7"&gt;http://dev.splunk.com/view/sdks/SP-CAAADP7&lt;/A&gt;.&lt;/P&gt;</description>
      <pubDate>Thu, 13 Jun 2013 16:21:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/accessing-saved-report-data-in-json-xml-from-Splunk-RESTful-API/m-p/62931#M12600</guid>
      <dc:creator>Neeraj_Luthra</dc:creator>
      <dc:date>2013-06-13T16:21:06Z</dc:date>
    </item>
    <item>
      <title>Re: accessing saved report data in json/xml from Splunk RESTful API</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/accessing-saved-report-data-in-json-xml-from-Splunk-RESTful-API/m-p/62932#M12601</link>
      <description>&lt;P&gt;OK. Thanks. I was just trying to access the report/saved search via the browser, not curl or php or whatever. Can this not be done just as a quick proof of concept? I found the saved search, not report, from your information above. However, it apepars that that is just to see the configuration or delete it or whatever. I just want the search's output. So I saw this-&amp;gt;search/search/jobs/export/ . . . I just don't know how to feed it my search string. I see that your documentation provides Curl examples. But again I just want to do this in a browser with a http request.&lt;/P&gt;</description>
      <pubDate>Thu, 13 Jun 2013 17:05:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/accessing-saved-report-data-in-json-xml-from-Splunk-RESTful-API/m-p/62932#M12601</guid>
      <dc:creator>tommyp1972</dc:creator>
      <dc:date>2013-06-13T17:05:46Z</dc:date>
    </item>
    <item>
      <title>Re: accessing saved report data in json/xml from Splunk RESTful API</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/accessing-saved-report-data-in-json-xml-from-Splunk-RESTful-API/m-p/62933#M12602</link>
      <description>&lt;P&gt;I don't think 4.x supports these but with 5.x and higher, following 2 URLs can be used from the browser for a quick check.&lt;BR /&gt;
&lt;CODE&gt;&lt;/CODE&gt;&lt;PRE&gt;&lt;CODE&gt;&lt;A href="https://localhost:8089/services/search/jobs/oneshot?search=search%20index%3D_internal%20head%201"&gt;https://localhost:8089/services/search/jobs/oneshot?search=search%20index%3D_internal%20head%201&lt;/A&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;
OR&lt;BR /&gt;
&lt;CODE&gt;&lt;/CODE&gt;&lt;PRE&gt;&lt;CODE&gt;&lt;A href="https://localhost:8089/services/search/jobs/export?search=search%20index%3D_internal%20head%201"&gt;https://localhost:8089/services/search/jobs/export?search=search%20index%3D_internal%20head%201&lt;/A&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 21 Jun 2013 18:33:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/accessing-saved-report-data-in-json-xml-from-Splunk-RESTful-API/m-p/62933#M12602</guid>
      <dc:creator>Neeraj_Luthra</dc:creator>
      <dc:date>2013-06-21T18:33:06Z</dc:date>
    </item>
  </channel>
</rss>

