Can I use rest to request and return some defined research or report. The returned format is XML or Jason.
For example: I have research: name: Category
Then use curl -k -u beebe:passwd http://localhost:8089/services/saved/searches/Category. It returns some info not related the real data like the count of people who bought candy in the search.
I want obtain the real data in the search not some configure info.
You actually have to dispatch the saved search. Check this out: http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTsearch#saved.2Fsearches.2F.7Bname.7D....
Then take the results within the
Also, if you are using a language for which we have an SDK - you can find more detail here on how to work with saved searches and those: http://dev.splunk.com/view/sdks-apis/SP-CAAADP7
Okay I know. But how can I get the ID of report not search.
Then I need to get the data of the report.
Edited response above. You then pass in the search id to the job to get the results.
The returned data is like below:
<?xml version='1.0' encoding='UTF-8'?>
I don't know what is used for.