How can I use REST api to get scheduled searches?

nsleden — Mon, 09 Nov 2020 21:04:49 GMT

I am able to get results with this:

curl -k -u ${SPLUNK_USER}:${SPLUNK_PASSWORD} -X GET https://{$SPLUNK_URL}/servicesNS/-/-/saved/searches?search="$eai:acl.owner='username'$"\&count=0

but I would also like to return only those that are scheduled. I tried to add:

?search="$eai:acl.owner='username'$ AND $is_scheduled=1$"\&count=0

but it returns 0. I also tried with only this:

?search="$is_scheduled=1$"\&count=0

and it returns 0. I am not sure how to make the is_scheduled work.

Thanks!

topic How can I use REST api to get scheduled searches? in Reporting