Getting Data In

Accessing Saved Report output in json from Splunk Rest API


I have some reports saved under search app. I want to access these report output via Splunk REST API in a java program. I am trying below rest API for accessing output in java program.

API: https://hostname:8089/services/saved/searches/report_name

I can get all related details of this report but unable to get actual output.

Can anyone help me getting the output of this report in json format.

0 Karma


First you must dispatch the report (if you havent already updated it using other means), then you must get the results endpoint to get the results.

When you dispatch the search, you will get a SID (search id). You use that SID in your quest for the results over here at the search/jobs/$SID$/results endpoint:

Remember that alerts, reports, and searches are all just searches. So the best examples I know of are here in the rest tutorial for searches:

0 Karma
Get Updates on the Splunk Community!

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...

Platform Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestIntroducing Splunk Edge Processor, simplified data ...