topic Saved Search in Source Code in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Saved-Search-in-Source-Code/m-p/709444#M12259 <P>I am working on Splunk Enteprise Security.&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="prateek1231_0-1737543082514.png" style="width: 779px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/34211i91EDCD8B8A405B45/image-dimensions/779x342?v=v2" width="779" height="342" role="button" title="prateek1231_0-1737543082514.png" alt="prateek1231_0-1737543082514.png" /></span></P><P>| savedsearch "Traffic&nbsp; - Total Count" is working fine and giving me desired output in the search but when calling it in source code not showing any result.<BR /><BR /></P><DIV><DIV><SPAN>{</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"type"</SPAN><SPAN>:&nbsp;</SPAN><SPAN>"ds.savedSearch"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"options"</SPAN><SPAN>:&nbsp;{</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"query"</SPAN><SPAN>:&nbsp;</SPAN><SPAN>"'|&nbsp;savedsearch&nbsp;\"Traffic&nbsp;-&nbsp;Total&nbsp;Count\"'"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"ref"</SPAN><SPAN>:&nbsp;</SPAN><SPAN>"Traffic&nbsp;-&nbsp;Total&nbsp;Count"</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;},</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"meta"</SPAN><SPAN>:&nbsp;{</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"name"</SPAN><SPAN>:&nbsp;</SPAN><SPAN>"Traffic&nbsp;-&nbsp;Total&nbsp;Count"</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;}</SPAN></DIV><DIV><SPAN>}<BR /><BR /></SPAN>Do I need to do any configurations to get output on this dashboard???</DIV></DIV> Wed, 22 Jan 2025 10:54:29 GMT prateek1231 2025-01-22T10:54:29Z Saved Search in Source Code https://community.splunk.com/t5/Splunk-Enterprise-Security/Saved-Search-in-Source-Code/m-p/709444#M12259 <P>I am working on Splunk Enteprise Security.&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="prateek1231_0-1737543082514.png" style="width: 779px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/34211i91EDCD8B8A405B45/image-dimensions/779x342?v=v2" width="779" height="342" role="button" title="prateek1231_0-1737543082514.png" alt="prateek1231_0-1737543082514.png" /></span></P><P>| savedsearch "Traffic&nbsp; - Total Count" is working fine and giving me desired output in the search but when calling it in source code not showing any result.<BR /><BR /></P><DIV><DIV><SPAN>{</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"type"</SPAN><SPAN>:&nbsp;</SPAN><SPAN>"ds.savedSearch"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"options"</SPAN><SPAN>:&nbsp;{</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"query"</SPAN><SPAN>:&nbsp;</SPAN><SPAN>"'|&nbsp;savedsearch&nbsp;\"Traffic&nbsp;-&nbsp;Total&nbsp;Count\"'"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"ref"</SPAN><SPAN>:&nbsp;</SPAN><SPAN>"Traffic&nbsp;-&nbsp;Total&nbsp;Count"</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;},</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"meta"</SPAN><SPAN>:&nbsp;{</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN>"name"</SPAN><SPAN>:&nbsp;</SPAN><SPAN>"Traffic&nbsp;-&nbsp;Total&nbsp;Count"</SPAN></DIV><DIV><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;}</SPAN></DIV><DIV><SPAN>}<BR /><BR /></SPAN>Do I need to do any configurations to get output on this dashboard???</DIV></DIV> Wed, 22 Jan 2025 10:54:29 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Saved-Search-in-Source-Code/m-p/709444#M12259 prateek1231 2025-01-22T10:54:29Z