topic Re: List of Macros in Knowledge Management

List of Macros

IRHM73 — Thu, 13 Oct 2016 08:36:33 GMT

Hi,

I wonder whether someone may be able to help me please.

Could someone tell me please, is it possible to create a query which produces a list of all the 'search macros'. I've tried to find the correct settings using a REST query, but I'm not sure whether I'm going down the correct path or not.

Many thanks and kind regards

Chris

Re: List of Macros

msivill_splunk — Thu, 13 Oct 2016 08:50:41 GMT

Does this work for you?

| rest /servicesNS/-/-/admin/macros count=0 splunk_server=local

or the shorter

| rest /servicesNS/-/-/admin/macros count=0

Re: List of Macros

IRHM73 — Thu, 13 Oct 2016 08:56:55 GMT

Hi @msivill, that's brilliant.

Thank you very much.

Kind Regards

Chris

Re: List of Macros

javiergn — Thu, 13 Oct 2016 09:03:44 GMT

Try this:

| rest splunk_server=local /servicesNS/-/-/admin/macros 
| table title, args, eai:acl.app, definition

Re: List of Macros

javiergn — Thu, 13 Oct 2016 09:04:19 GMT

Didn't see the answer above so ignore mine as it's pretty much the same

Re: List of Macros

mschaaf — Thu, 06 Dec 2018 14:08:33 GMT

Where is /admin/macros documented? I couldn't find it within the REST API Reference Manual.

Re: List of Macros

Graham_Hanningt — Fri, 15 Nov 2019 08:26:54 GMT

Thank you!

I'm using your answer to perform searches such as:

| rest /servicesNS/-/-/admin/macros count=0 
| where 'eai:appName'="myapp" AND like(title, "some_macro_name_prefix_%")
| table title

Why? I'm researching how to create a multiselect dropdown in a dashboard that lists macros whose names begin with a certain prefix, and then appends the selected macro(s) to the dashboard search. This is a relatively easy way to enable users to specify "custom" filters that are not directly, or not easily, supported by existing UI controls. I already include a text box for users to add their own SPL snippets to the text, so users could already "manually" refer to macros; a dropdown is friendlier.