Splunk Dev

Python SDK not returned all saved searches

askjoe
Engager

I'm running into an issue where I'm trying to pull a list of saved searches via the SDK. I've followed the directions via the documentation and I'm certain that my owner/app/shared settings are correct. I'm only getting saved searches where the owner is set to nobody (basically the default saved searches).

kwargs_splunk.update({'owner': 'myowner', 'app':'search', 'sharing':'global'.....})

service = client.connect(**kwargs_splunk)

for savedsearch in service.saved_searches:
print savedsearch.name

What am I doing wrong? Even if I use the credentials of the users who creating the new searches, I still get the default ones and nothing else.

Tags (3)

paramagurukarth
Builder

Try clisent.connect without 'sharing' in kwargs
ie, just **host,port,username,password and app

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...