<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Create Saved Search with Rest API -&amp;gt;need working example in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Create-Saved-Search-with-Rest-API-gt-need-working-example/m-p/506636#M86248</link>
    <description>Change curl -ku $up =&amp;gt; curl -ku $UserPass</description>
    <pubDate>Tue, 30 Jun 2020 07:39:39 GMT</pubDate>
    <dc:creator>isoutamo</dc:creator>
    <dc:date>2020-06-30T07:39:39Z</dc:date>
    <item>
      <title>Create Saved Search with Rest API -&gt;need working example</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Create-Saved-Search-with-Rest-API-gt-need-working-example/m-p/506626#M86245</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;Does somebody have a working example of how to create a Saved Search using the Rest API with XML?&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;Max&lt;/P&gt;</description>
      <pubDate>Tue, 30 Jun 2020 06:10:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Create-Saved-Search-with-Rest-API-gt-need-working-example/m-p/506626#M86245</guid>
      <dc:creator>Max_99</dc:creator>
      <dc:date>2020-06-30T06:10:23Z</dc:date>
    </item>
    <item>
      <title>Re: Create Saved Search with Rest API -&gt;need working example</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Create-Saved-Search-with-Rest-API-gt-need-working-example/m-p/506634#M86247</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;In linux shell you could do next&lt;/P&gt;&lt;P&gt;UserPass=admin:changeme&lt;/P&gt;&lt;P&gt;curl -ku $up https://localhost:8089/services/search/jobs -d search="search index=_internal earliest=-1m|stats count"&lt;BR /&gt;&amp;lt;?xml version="1.0" encoding="UTF-8"?&amp;gt;&lt;BR /&gt;&amp;lt;response&amp;gt;&lt;BR /&gt;&amp;lt;sid&amp;gt;1593502508.3&amp;lt;/sid&amp;gt;&lt;BR /&gt;&amp;lt;/response&amp;gt;&lt;/P&gt;&lt;DIV&gt;curl -ku $up https://localhost:8089/services/search/jobs/1593502508.3/results/ --get -d output_mode_xml&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;?xml version='1.0' encoding='UTF-8'?&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;results preview='0'&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;meta&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;fieldOrder&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;field&amp;gt;count&amp;lt;/field&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;/fieldOrder&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;/meta&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;result offset='0'&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;field k='count'&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;value&amp;gt;&amp;lt;text&amp;gt;275&amp;lt;/text&amp;gt;&amp;lt;/value&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;/field&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;/result&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;lt;/results&amp;gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;r. Ismo&lt;/DIV&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 30 Jun 2020 07:38:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Create-Saved-Search-with-Rest-API-gt-need-working-example/m-p/506634#M86247</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2020-06-30T07:38:34Z</dc:date>
    </item>
    <item>
      <title>Re: Create Saved Search with Rest API -&gt;need working example</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Create-Saved-Search-with-Rest-API-gt-need-working-example/m-p/506636#M86248</link>
      <description>Change curl -ku $up =&amp;gt; curl -ku $UserPass</description>
      <pubDate>Tue, 30 Jun 2020 07:39:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Create-Saved-Search-with-Rest-API-gt-need-working-example/m-p/506636#M86248</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2020-06-30T07:39:39Z</dc:date>
    </item>
  </channel>
</rss>

