Splunk Dev

How to enable or disable parameter actions email and script with REST API?

0range
Communicator

subj. how is it possible?
here http://dev.splunk.com/view/python-sdk/SP-CAAAEK2#savedsearchparams the params action.email and action.script are marked as read-only 😞

0 Karma

paramagurukarth
Builder

To Set action.email to 1... send the param "actions" as "email"...
This works for email.. try the same for "alert"
Refer the below rest url of your environment for the internal parameter names used... While creating alerts pragmatically we have to use these parameters...(Applicable for all entities in splunk... :))

https://localhost:8089/servicesNS/UserName/AppName/saved/searches

Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...