Reporting

How to update all alert parameters via post api?

mosh
Explorer

I need to update many params in many saved searches via POST API from nodejs.

I  can create alerts, but cannot update all the params (including spl search) via POST to this endpoint

https://${HOST}:8089/servicesNS/${USERNAME}/${APP}/saved/searches/${ALERTNAME} 

Error message is: cannot create .. savedsearch by the name already exists.

Is there an  endpoint to update (POST/PUT) all the params (in GUI)?

I was able to update only some params using splunk javascript/python3 sdk, but it doesn't support many of the advanced params and is very slow compared to the POST API, and some of the params names are different?

Some examples (with all supported params by sdk (JS/Python3 and API) would be helpful.

Labels (1)
Tags (4)
0 Karma
1 Solution

mosh
Explorer

Figured out myself, had to delete params.name and then POST.

View solution in original post

0 Karma

mosh
Explorer

Figured out myself, had to delete params.name and then POST.

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

Hello @mosh ,

I'm a Splunk Community moderator here. I'm glad that you figured out the answer to your own question. You can accept your own answer by clicking "Accept as Solution". This may be helpful for other users visiting your question in the future.

 

Happy Splunking!!!

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...