[command ]Getting the list of all saved searches-splunk list saved-search

[spl109]

Only the saved APP saved-search list is displayed.
How do I get other APP saved-search listings?

command : $SPLUNK_HOME/bin/splunk list saved-search

Do not display saved-search of other APP

[ramgnisiv]

Based on documentation, this could also work for you:

curl -k -u admin:pass https://localhost:8089/services/saved/searches

https://docs.splunk.com/Documentation/Splunk/6.1.3/RESTAPI/RESTsearch#POST_saved.2Fsearches

[ramgnisiv · Accepted solution]

I run this command in Splunk to get the overview of Saved Searches:

| rest /servicesNS/-/-/saved/searches splunk_server=local
| fields title

Perhaps this can guide you in the right direction.

[spl109]

thank you for your answer.
I'm looking for other ways without REST API.

command : $SPLUNK_HOME/bin/splunk list saved-search
Is there a way to improve the above command?