Getting Data In

Search id update problem

beebeandwer
Path Finder

I find that the search id is changes as time. I am not sure why it happen and how long dose it change once.

Tags (1)
0 Karma

Ayn
Legend

Uh, it seems like you should read up a bit on this instead of throwing questions out randomly. I suggest you read this. http://docs.splunk.com/Documentation/Splunk/5.0.2/RESTAPI/RESTsearches

0 Karma

beebeandwer
Path Finder

You'll need the search ID to retrieve the search, or the number wrapped in . I mean the SID. btw, how can i get the search ID.

0 Karma

beebeandwer
Path Finder

The id is return from the script
curl -k -u beebe:qiancong1 https://localhost:8089/servicesNS/beebe/search/saved/searches/Category/dispatch -d trigger_actions=1

0 Karma

Ayn
Legend

Give us more details. What search id's are you talking about? All searches are given unique id's so if that's what you mean by changing that's hardly surprising behaviour 🙂

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...