topic Re: servicesns/user/app/saved/searches endpoint doesn't filter on user or app in Getting Data In

servicesns/user/app/saved/searches endpoint doesn't filter on user or app

joemaz95 — Tue, 21 Aug 2018 20:29:20 GMT

Like the title says, I can hit the endpoint successfully, but the results are the same no matter what I replace "user" or "app" with. Does anyone know why I can't find just the saved searches within a user or app?

Re: servicesns/user/app/saved/searches endpoint doesn't filter on user or app

somesoni2 — Tue, 21 Aug 2018 20:44:44 GMT

Try something like this

| rest /servicesNS/-/-/saved/searches splunk_server=local | search eai:acl.owner="YourUserFilterHere" OR eai:acl.app="YourAppNameFilterHere"

Re: servicesns/user/app/saved/searches endpoint doesn't filter on user or app

joemaz95 — Wed, 22 Aug 2018 14:17:28 GMT

Thanks for the reply! Do you know how I would go about doing that through the rest API?