Hi, We have a requirement to send data(all indexes data) to other tool using REST API.How can i display all indexes data using rest API.
I tested with this end point,but it is showing only indexes information not data.
curl -k -u admin:pwd https://IP:8089/services/data/indexes/
How can i display or provide full indexes data if any one use the endpoint?
Hi @ubp1252,
You should use search job export endpoint, please try below sample;
curl -k -u admin:pwd https://IP:8089/services/search/jobs/export -d search="search index=abc earliest=-24h" -d output_mode=json
You can edit the search according to your desired fields like below;
curl -k -u admin:pwd https://IP:8089/services/search/jobs/export -d search="search index=abc earliest=-24h | table host index sourcetype _raw" -d output_mode=json
Hi @ubp1252,
You should use search job export endpoint, please try below sample;
curl -k -u admin:pwd https://IP:8089/services/search/jobs/export -d search="search index=abc earliest=-24h" -d output_mode=json
How to take only few fields like host,index,sourcetype,_raw in command