Getting Data In

How can I search a specific index via the API using curl?

msmapper
Path Finder

How can I search a specific index via the API using curl? When I try to use
curl -u user:pass -k -d 'search=search index="indexname" OR curl -u user:pass -k -d 'search=search index="indexname"

I get results but the following messages returned...
No Matching index found for 'index=indexname'
No mmatching index found for index::indexname

Any help would be appreciated..

Tags (4)
1 Solution

ineeman
Splunk Employee
Splunk Employee

The problem here is because your request isn't URL encoded. Specifically, your:

search index="indexname"

Needs to be URL encoded. You can easily fix this by doing:

curl -k -u admin:changeme https://localhost:8089/services/search/jobs --data-urlencode 'search=search index="_internal" | head 1'

View solution in original post

ineeman
Splunk Employee
Splunk Employee

The problem here is because your request isn't URL encoded. Specifically, your:

search index="indexname"

Needs to be URL encoded. You can easily fix this by doing:

curl -k -u admin:changeme https://localhost:8089/services/search/jobs --data-urlencode 'search=search index="_internal" | head 1'
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...