Reporting
Highlighted

Is it required to include the SID in order to access my saved searches via Splunk API?

New Member

To access my saved searches via Splunk API, is it a must to include the SID?
I only ask because the saved search is on a schedule and the SID changes after each time the search runs.
Are there any other options to query the saved search without the use of the SID?

Labels (1)
0 Karma