Reporting

CLI add savedsearch fail

Explorer

try to run command

/opt/splunk# ./bin/splunk add saved-search -name 'TEST'

An error occurred:
 Argument "actions" is not supported by this handler.

Argument "actions" is not supported by this handler.
before it works(

Tags (2)

Splunk Employee
Splunk Employee

you need to provide the actual search, like so:

./splunk add saved-search -search '' -name 'TEST' -schedule

0 Karma