Splunk Dev

Why is the Rest API for getting saved searches giving different number of results?

VatsalJagani
SplunkTrust
SplunkTrust

When trying to access saved-searches from python request, not giving actual no of saved searches, many saved searches are missing.

| rest servicesNS/-/-/saved/searches

While accessing the above command from a search bar giving the correct result.

Why are some saved searches not showing while accessing through python requests module? ( I'm accessing with same URL and same user.)

0 Karma

p_gurav
Champion

Hi,

Can you try something like this:

| rest servicesNS/-/-/saved/searches splunk_server=local

Also refer this docs:
http://dev.splunk.com/view/python-sdk/SP-CAAAEK2

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

I also tried this, but when I try it with search it is giving 138 result, but when I try with python I'm getting 30 result. (138 looks correct).

0 Karma

p_gurav
Champion
0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...