Knowledge Management

Query to bring the macro dependency?


Hi All,

Can someone help me with query that gives the macro dependency(ex Dashboard, reports etc ).
When I fire that query in search window, I need information like in what all dashboard, reports etc that macro is used.

Thanks in advance...

Labels (1)
Tags (2)
0 Karma


There is no one query to do that. You'll have to search all saved searches, dashboards, and eventtypes (each is a different REST call) for instances of the macro.

| rest /servicesNS/-/-/saved/searches | search search="*macroName*"
| rest /servicesNS/-/-/ui/views | search eai:data="*macroName*"
| rest /servicesNS/-/-/saved/eventtypes| search search="*macroName*"
If this reply helps you, an upvote would be appreciated.
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!