How to access saved search artifacts from last Monday via REST API?

[splunk_zen]

Let's say Splunk keeps the last job artifacts from an accelerated search which spans the last 7 days.

What's the simplest way to access the job equivalent to last Monday through the API?

[masonmorales · Accepted solution]

Here are a couple ideas. Let me know if you're looking for something more specific. 🙂

• http://docs.splunk.com/Documentation/Splunk/6.0.9/RESTAPI/RESTsearches#Get_search_results
• http://docs.splunk.com/Documentation/Splunk/6.3.2/SearchReference/Loadjob
• http://docs.splunk.com/Documentation/Splunk/6.0.9/RESTAPI/RESTsearches#Create_a_search_job

[masonmorales]

@splunk_zen any luck?

[richgalloway]

What exactly do you wish to fetch using the API?