JAVA-SDK Summary

[srirammk90]

Hi,

I have created a saved search and now i want to schedule it and run summary indexing on it using JAVA SDK....?

How do i do it....?

[fross_splunk]

You can schedule a saved search by calling the setScheduled and setCronSchedule methods on it, and then calling update, as in:

savedSearch.setIsScheduled(true); 
savedSearch.setCronSchedule("15 4 * * 6"); 
// Update the server with changes
savedSearch.update();

This example is taken from the SDK documentation.

For setting up summary indexing you would have to write code to edit the configuration files via the REST API. I would set up summary indexing on an example saved search, then translate it into calls to the collection returned by Service.getConfs.

If you're using Splunk 5.0 or later, it would be better to use report acceleration, but we haven't documented the REST endpoints for controlling that yet. I've let the docs team know of that oversight.