Reporting
Highlighted

SavedSearch using Java SDK

Engager

I am new to Splunk and as part of a project in my organization, I want to create and run saved searches using the Java SDK. My question is, once I have created one , can I modify parts of the query for subsequent runs of the same saved search.

For example, if I wish to retrieve results based on a time range, the range will change but the rest of the query will remain the same. Can this be done and if yes, can someone please help with an approach?

0 Karma