I am attempting to create a workflow for our work.
Currently we have 100s of panels in our dashboards. I have developed a solution to grab the searches of these panels leaving me with 100s of searches I now want to save as a report and run at midnight.
Not sure if anyone's working with something similar but I need two things met:
1. Create a report with a passed search query by api.
2. Set a schedule to the created report by api.
I'm hoping Splunk has this inbuilt, if not I was thinking of creating a utility to make this but would love to save cycles!