Developing for Splunk Enterprise

How to enable or disable parameter actions email and script with REST API?

Communicator

subj. how is it possible?
here http://dev.splunk.com/view/python-sdk/SP-CAAAEK2#savedsearchparams the params action.email and action.script are marked as read-only 😞

0 Karma

To Set action.email to 1... send the param "actions" as "email"...
This works for email.. try the same for "alert"
Refer the below rest url of your environment for the internal parameter names used... While creating alerts pragmatically we have to use these parameters...(Applicable for all entities in splunk... :))

https://localhost:8089/servicesNS/UserName/AppName/saved/searches

State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!