Getting Data In
Highlighted

How to clone a saved search via REST API command? Is there documentation on this?

Path Finder

How would I clone a saved search via the REST API? I do not see any documentation in the REST API endpoints regarding copy/clone existing saved searches. http://docs.splunk.com/Documentation/Splunk/6.1.3/RESTAPI/RESTsearch#saved.2Fsearches.2F.7Bname.7D.2...

0 Karma
Highlighted

Re: How to clone a saved search via REST API command? Is there documentation on this?

SplunkTrust
SplunkTrust

Not sure if cloning operation can be done from REST API. I would be interested if anyone knows a way to do it.

0 Karma
Highlighted

Re: How to clone a saved search via REST API command? Is there documentation on this?

Splunk Employee
Splunk Employee

Cloning is basically making a copy of the object but changing the name/id. There is no "clone" action in Splunk's REST API, however the following steps outline how to clone any object from the REST endpoints:

  1. GET the object you want to clone
  2. change the name of the object
  3. POST the object back to the endpoint