Getting Data In
Highlighted

Create Saved Search with Rest API ->need working example

New Member

Hi,

Does somebody have a working example of how to create a Saved Search using the Rest API with XML?

Thanks

Max

Labels (1)
0 Karma
Highlighted

Re: Create Saved Search with Rest API ->need working example

Contributor

Hi

In linux shell you could do next

UserPass=admin:changeme

curl -ku $up https://localhost:8089/services/search/jobs -d search="search index=_internal earliest=-1m|stats count"
<?xml version="1.0" encoding="UTF-8"?>
<response>
<sid>1593502508.3</sid>
</response>

curl -ku $up https://localhost:8089/services/search/jobs/1593502508.3/results/ --get -d output_mode_xml
<?xml version='1.0' encoding='UTF-8'?>
<results preview='0'>
<meta>
<fieldOrder>
<field>count</field>
</fieldOrder>
</meta>
<result offset='0'>
<field k='count'>
<value><text>275</text></value>
</field>
</result>
</results>
 
r. Ismo

 

0 Karma
Highlighted

Re: Create Saved Search with Rest API ->need working example

Contributor
Change curl -ku $up => curl -ku $UserPass
0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.