Getting Data In

REST API endpoints for saved searches?

matstap
Communicator

I'm trying to find how to get the REST API endpoints for saved searches, but I'm finding conflicting information.
Would this be the endpoint: https://{host}:{mPort}/services/saved/searches/{ss name}

Or would this be correct: https://{host}:{mPort}/servicesNS/{user}/{app}/saved/searches/{ss name}

Or would it be something else?

0 Karma
1 Solution

tiagofbmm
Influencer

tiagofbmm
Influencer
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!