I have some scripts that generate a view with some saved searches based on a template. I can add in the saved searches using the rest api but I dont see anyway to add the view. Is this possible?
Yes you can do this using the https://localhost:8089/services/data/ui/views/ endpoint.
(If you hit in the browser as https://localhost:8089/services/data/ui/views/_new it will give you documentation on what is required.
The view xml is eai:data and the object name is name (that's what's used in the URI).
View solution in original post
thanks for pointing me in the right direction, I am not sure how to call this from Python. I am using the splunk.binding module, any chance you could give a quick example? Thanks.