https://community.splunk.com/t5/Splunk-Search/How-to-use-REST-API-to-retrieve-the-result-of-a-pivot/m-p/401894#M168740 <P>The API based on the information provided by the following URL, although all code are done in C# with standard Post/Get request using HTTPWebRequest -<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing">https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing</A> </P> Fri, 22 Jun 2018 21:50:36 GMT rs8888 2018-06-22T21:50:36Z https://community.splunk.com/t5/Splunk-Search/How-to-use-REST-API-to-retrieve-the-result-of-a-pivot/m-p/401892#M168738 <P>Hi All,</P> <P>Is there any sample that uses the "|pivot" in the REST API call and gets the search results data returned? </P> <P>Currently, the REST API just returns some structural information such as fields, dataset.*, open_in_search, pivot_json, pivot_search but no data. Running the same query in the Splunk UI the data are returned correctly. </P> <P>From what I read online, I gathered that the pivot returns instructions to run the searches, but none of the provided searches works. Even using the "| tstat" that is generated by pivot when ran in the RestAPI it never completes, it just ran forever. Whereas, running the "| tstat", command on UI sometimes returns data.</P> <P>Calling /search/pivot returns structural information no SEARCH RESULT DATA <BR /> Calling /search/search "| tstat" it keeps running never completes.</P> <P>If anyone had any success by executing the "|pivot " via REST API and got search results, please advise.</P> Tue, 29 Sep 2020 20:08:27 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-REST-API-to-retrieve-the-result-of-a-pivot/m-p/401892#M168738 rs8888 2020-09-29T20:08:27Z https://community.splunk.com/t5/Splunk-Search/How-to-use-REST-API-to-retrieve-the-result-of-a-pivot/m-p/401893#M168739 <P>Can you share the details of your POST / GET request to the api?</P> Fri, 22 Jun 2018 18:40:01 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-REST-API-to-retrieve-the-result-of-a-pivot/m-p/401893#M168739 jkat54 2018-06-22T18:40:01Z https://community.splunk.com/t5/Splunk-Search/How-to-use-REST-API-to-retrieve-the-result-of-a-pivot/m-p/401894#M168740 <P>The API based on the information provided by the following URL, although all code are done in C# with standard Post/Get request using HTTPWebRequest -<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing">https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing</A> </P> Fri, 22 Jun 2018 21:50:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-REST-API-to-retrieve-the-result-of-a-pivot/m-p/401894#M168740 rs8888 2018-06-22T21:50:36Z https://community.splunk.com/t5/Splunk-Search/How-to-use-REST-API-to-retrieve-the-result-of-a-pivot/m-p/401895#M168741 <P>Perfect can you share the code you’re using for the rest call?</P> Fri, 22 Jun 2018 23:06:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-REST-API-to-retrieve-the-result-of-a-pivot/m-p/401895#M168741 jkat54 2018-06-22T23:06:56Z