Reporting

CLI add savedsearch fail

sadon
Explorer

try to run command

/opt/splunk# ./bin/splunk add saved-search -name 'TEST'

An error occurred:
 Argument "actions" is not supported by this handler.

Argument "actions" is not supported by this handler.
before it works(

Tags (2)

piebob
Splunk Employee
Splunk Employee

you need to provide the actual search, like so:

./splunk add saved-search -search '' -name 'TEST' -schedule

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...