Getting Data In

How to rename the savedsearches using REST API

ajayathmakuri
Engager

Hi Splunkers,

Any idea how can we rename the saved searches using REST API.

I have tried by referring https://wiki.splunk.com/Community:How_to_change_owner_of_savedsearches_using_REST_API but I'm getting errors while executing.Please assist me .Thanks!

0 Karma

koshyk
Super Champion

You need to do outside Splunk GUI as GUI supports REST GET only.

So your client (postman) or curl.
An example using CURL with MySavedSearch which has ownership of admin user

curl -k -u admin:pass https://localhost:8089/servicesNS/admin/search/saved/searches/MySavedSearch -d title="MyNewSearch"

Please refer https://docs.splunk.com/Documentation/Splunk/7.2.6/RESTREF/RESTsearch

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...