Splunk Dev

Why is the Rest API for getting saved searches giving different number of results?

VatsalJagani
SplunkTrust
SplunkTrust

When trying to access saved-searches from python request, not giving actual no of saved searches, many saved searches are missing.

| rest servicesNS/-/-/saved/searches

While accessing the above command from a search bar giving the correct result.

Why are some saved searches not showing while accessing through python requests module? ( I'm accessing with same URL and same user.)

0 Karma

p_gurav
Champion

Hi,

Can you try something like this:

| rest servicesNS/-/-/saved/searches splunk_server=local

Also refer this docs:
http://dev.splunk.com/view/python-sdk/SP-CAAAEK2

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

I also tried this, but when I try it with search it is giving 138 result, but when I try with python I'm getting 30 result. (138 looks correct).

0 Karma

p_gurav
Champion
0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...