Hi All,
We have now fine tuning our environment for that purpose we need your favor. We want to check few parameters for every dashboard ,report and alert which is mentioned in the below screenshot .
We request you ,could you provide the query which gives this required output as mentioned in the below.
Start with the data you get from ReST services e.g.
| rest splunk_server=local /servicesNS/-/-/saved/searches
@ITWhisperer no it is not working please understnad my question and help me for the same i want simple query which gives me required output which i share in the previous screenshot
Have a look at the returned fields and decide which ones you want or at least have the information in that you are after
@ITWhisperer yes i have alreadyc check with your query but it is not expected result which i want .i just want simple query which give me result for all configured report deatil infromation .
There is no such thing as a simple query for this - you will have to do some work!
@ITWhisperer yes i am agree with you if you can help me for this then i will expand this query
We have already helped you. Now it is time for you to put in some effort. Use what you learned from the free training (https://www.splunk.com/en_us/training.html?301=%2Ftraining&filters=filterGroup1FreeCourses) to make the results into what you desire.
There are separate rest commands to get information about searches/alerts and dashboards (views). Start with
| rest /services/saved/searches splunk_server=local
| append [ | rest services/data/ui/views ]
@richgalloway no this is not working which i expected i want query which give me result output which i mentioned in pervious screenshot
The provided query is just a starting point. Use your SPL skills to reduce the results to the desired fields.
@richgalloway yes i can agree but output is not required one if you give me random query at least near about which give near about result then i will try to sort out this .