Solved: Re: REST API searches without search id - Splunk Community

Getting Data In

Hello guys,

is it possible to request directly results without preliminary search id or we always need to run, get the id then run again against the API?

Thanks.

* If this helps, please upvote or accept solution if it solved *

1 Solution

Solution

Use the exports endpoint

http://docs.splunk.com/Documentation/Splunk/6.6.1/RESTREF/RESTsearch#search.2Fjobs.2Fexport

View solution in original post

Solution

Use the exports endpoint

http://docs.splunk.com/Documentation/Splunk/6.6.1/RESTREF/RESTsearch#search.2Fjobs.2Fexport

Works perfectly, thanks a lot.

* If this helps, please upvote or accept solution if it solved *

Get Updates on the Splunk Community!

Splunk Enterprise Security: An Automated Phishing Response Workflow

Originally posted on Splunk.com. Key takeaways The volume of phishing emails can overwhelm even the most ...

Sharper ES Detections, Agentic AI Integrations, Smarter Workload Management, and More ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Data Outage Monitoring and Reporting

We’ve all been there, right? Living our best life, working on our Splunk environment, when out of nowhere a ...