I find that the search id is changes as time. I am not sure why it happen and how long dose it change once.
Uh, it seems like you should read up a bit on this instead of throwing questions out randomly. I suggest you read this. http://docs.splunk.com/Documentation/Splunk/5.0.2/RESTAPI/RESTsearches
You'll need the search ID to retrieve the search, or the number wrapped in . I mean the SID. btw, how can i get the search ID.
The id is return from the script curl -k -u beebe:qiancong1 https://localhost:8089/servicesNS/beebe/search/saved/searches/Category/dispatch -d trigger_actions=1
Give us more details. What search id's are you talking about? All searches are given unique id's so if that's what you mean by changing that's hardly surprising behaviour 🙂
