Can I pass splunk a query through the url

[bscanlon]

I would like to pass Splunk a query through URL so that when a user clicks on a link it brings them right to the Splunk dashboard with the results of the query

ex: https://splunkserver?"search for this"&"This time range"

Is this possible and if so, could someone point me towards any relate documentation

-Thanks in advance.

[gkanapathy]

You can create a URL to a specific view of a search. For example:

http://splunk:8000/app/search/flashtimeline?q=search+term1+term2+field1%3Dvalue1|+stats+count&earlie...

[justinhart]

The best way to do this would be to create the search, save it and then give them the url to the saved search. You can do the same thing with dashboards.

Documentation: Saving Searches and Sharing Search Results