Can I use rest to request and return some defined research or report. The returned format is XML or Jason.
For example: I have research: name: Category
Then use curl -k -u beebe:passwd http://localhost:8089/services/saved/searches/Category. It returns some info not related the real data like the count of people who bought candy in the search.
I want obtain the real data in the search not some configure info.
You actually have to dispatch the saved search. Check this out: http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTsearch#saved.2Fsearches.2F.7Bname.7D....
Then take the results within the
Also, if you are using a language for which we have an SDK - you can find more detail here on how to work with saved searches and those: http://dev.splunk.com/view/sdks-apis/SP-CAAADP7
The returned data is like below:
<?xml version='1.0' encoding='UTF-8'?>
I don't know what is used for.