topic Why does the REST endpoints only show data from the Search app? in Getting Data In

Why does the REST endpoints only show data from the Search app?

andyk — Thu, 11 Oct 2012 12:30:28 GMT

I have created a new app with many saved searches. And I have created a new view in this app. In this view I have created a EntityLinkLister that have the entityPath set to "saved/searches". The list of saved searches shows up in the view but it only shows the defult saved searches from the Search app.

How do I make it show the saved searches in my app?

Re: Why does the REST endpoints only show data from the Search app?

dturnbull_splun — Fri, 12 Oct 2012 22:23:41 GMT

Do you have a <param name="namespace">my_app</param> attribute in your EntityLinkLister?

Re: Why does the REST endpoints only show data from the Search app?

andyk — Mon, 15 Oct 2012 08:23:14 GMT

That solved the problem! Thanks!

The documentation could be better on this subject. On this page http://docs.splunk.com/Documentation/Splunk/4.3.4/Developer/HowToUseListers#EntityLinkLister
it says: "The below example returns a list of saved searches that are available (using Splunk's permissions system) to the current Splunk user and app."

It does not mention the namespace parameter.