topic Using REST API to review tag=suppress, updated field not updated with last change date/time in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Using-REST-API-to-review-tag-suppress-updated-field-not-updated/m-p/384978#M69199 <P>Using this SPL:</P> <PRE><CODE>| rest servicesNS/-/-/search/tags/suppress splunk_server=local </CODE></PRE> <P>I get a list of all of the searches that result in tag=suppress. It seems that the outputted field labeled "updated" only contains when the original tag was created and does not reflect when each search was updated. Is there a way to see when each search was updated for a particular tag?</P> Wed, 22 May 2019 21:15:04 GMT carlkennedy_tsy 2019-05-22T21:15:04Z Using REST API to review tag=suppress, updated field not updated with last change date/time https://community.splunk.com/t5/Getting-Data-In/Using-REST-API-to-review-tag-suppress-updated-field-not-updated/m-p/384978#M69199 <P>Using this SPL:</P> <PRE><CODE>| rest servicesNS/-/-/search/tags/suppress splunk_server=local </CODE></PRE> <P>I get a list of all of the searches that result in tag=suppress. It seems that the outputted field labeled "updated" only contains when the original tag was created and does not reflect when each search was updated. Is there a way to see when each search was updated for a particular tag?</P> Wed, 22 May 2019 21:15:04 GMT https://community.splunk.com/t5/Getting-Data-In/Using-REST-API-to-review-tag-suppress-updated-field-not-updated/m-p/384978#M69199 carlkennedy_tsy 2019-05-22T21:15:04Z