Getting Data In
Highlighted

Splunk Rest API call

New Member

We need to have a rest service to our saved searches, where we can pass the start time and end time and the name of the search and it can trigger the the search. and it should send an email too..will this be possible?

Tags (4)
0 Karma
Highlighted

Re: Splunk Rest API call

Explorer

The mentioned doc explains how to create/update/delete "saved search". But seems like that API does not allow to enable/disable action.email and enable/disable a schedule of that search. Am I missing something or I have to go to Web UI and check the checkboxes in order to enable/disable those options ?

0 Karma
Highlighted

Re: Splunk Rest API call

Splunk Employee
Splunk Employee
0 Karma
Highlighted

Re: Splunk Rest API call

Explorer

I am not talking about rescheduling but about enabling "Schedule Alert" feature

http://goo.gl/n9OKfu

and also "Enable Email" checkbox inside

http://goo.gl/7dTI3x

0 Karma