https://community.splunk.com/t5/Getting-Data-In/Python-Rest-API-script/m-p/398233#M70999 <P>After connecting to the splunk Rest API, I would like to run a search query built like this and stored in a variable. <BR /> hostname is equal to a string variable</P> <P>searchQuery= "Search | sourcetype=Audit agent_name=hostname| head 5" </P> <P>I would also like to add in the earliest time as a variable... not sure where to add this. I would then like to return the SID and data in a json format.</P> <P>Thanks for helping!</P> Tue, 16 Jul 2019 14:52:13 GMT travismonta 2019-07-16T14:52:13Z https://community.splunk.com/t5/Getting-Data-In/Python-Rest-API-script/m-p/398233#M70999 <P>After connecting to the splunk Rest API, I would like to run a search query built like this and stored in a variable. <BR /> hostname is equal to a string variable</P> <P>searchQuery= "Search | sourcetype=Audit agent_name=hostname| head 5" </P> <P>I would also like to add in the earliest time as a variable... not sure where to add this. I would then like to return the SID and data in a json format.</P> <P>Thanks for helping!</P> Tue, 16 Jul 2019 14:52:13 GMT https://community.splunk.com/t5/Getting-Data-In/Python-Rest-API-script/m-p/398233#M70999 travismonta 2019-07-16T14:52:13Z