Getting Data In

How to rename the savedsearches using REST API

ajayathmakuri
Engager

Hi Splunkers,

Any idea how can we rename the saved searches using REST API.

I have tried by referring https://wiki.splunk.com/Community:How_to_change_owner_of_savedsearches_using_REST_API but I'm getting errors while executing.Please assist me .Thanks!

0 Karma

koshyk
Super Champion

You need to do outside Splunk GUI as GUI supports REST GET only.

So your client (postman) or curl.
An example using CURL with MySavedSearch which has ownership of admin user

curl -k -u admin:pass https://localhost:8089/servicesNS/admin/search/saved/searches/MySavedSearch -d title="MyNewSearch"

Please refer https://docs.splunk.com/Documentation/Splunk/7.2.6/RESTREF/RESTsearch

0 Karma
Get Updates on the Splunk Community!

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Using the Splunk Threat Research Team’s Latest Security Content

REGISTER HERE Tech Talk | Security Edition Did you know the Splunk Threat Research Team regularly releases ...