Hello guys,
is it possible to request directly results without preliminary search id or we always need to run, get the id then run again against the API?
Thanks.
Use the exports endpoint
http://docs.splunk.com/Documentation/Splunk/6.6.1/RESTREF/RESTsearch#search.2Fjobs.2Fexport
Works perfectly, thanks a lot.