Splunk Enterprise

REST API - To include Time

vijaysri
Builder

Hi,  

I am using below REST API  

https://splunk-api-url:8089/servicesNS/nobody/appname/search/jobs/export?output_mode=json&count=1&search=|savedsearch%20savedsearchname%20|search%20ProjectCode=1NN

I need to include time in the above URL - Please let me know how to do it, in the saved search we have DateAndTime values, when I try to fetch the DateAndTime as I am fetching the Project Code its not working

https://splunk-api-url:8089/servicesNS/nobody/appname/search/jobs/export?output_mode=json&count=1&se...   

 

Labels (1)
Tags (2)
0 Karma
1 Solution

vijaysri
Builder

This one worked

https://splunk-api-url:8089/servicesNS/nobody/appname/search/jobs/export?output_mode=json&segmentation=none&latest_time=2020-07-15T00%3A05%3A00.000&earliest_time=2020-07-15T00%3A00%3A00.000&search=|savedsearch%20savedsearchname%20|search%20Code=XXX-10-12

View solution in original post

0 Karma

vijaysri
Builder

This one worked

https://splunk-api-url:8089/servicesNS/nobody/appname/search/jobs/export?output_mode=json&segmentation=none&latest_time=2020-07-15T00%3A05%3A00.000&earliest_time=2020-07-15T00%3A00%3A00.000&search=|savedsearch%20savedsearchname%20|search%20Code=XXX-10-12

View solution in original post

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!