Splunk Search

Can I get a list of reports from a splunk query?

EricLloyd79
Builder

Is there a way to run a Splunk query to get a list of all reports by using a Splunk query?

1 Solution

Vijeta
Influencer

You can try using rest, the view will be search for reports

|rest /servicesNS/-/-/saved/searches |table request.ui_dispatch_view title

View solution in original post

davidtrujillo
Explorer

Reports are saved searches whose alert type is "always".

Try this:

| rest /servicesNS/-/-/saved/searches | search alert_type = "always"

Vijeta
Influencer

You can try using rest, the view will be search for reports

|rest /servicesNS/-/-/saved/searches |table request.ui_dispatch_view title
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...

The Visibility Gap: Hybrid Networks and IT Services

The most forward thinking enterprises among us see their network as much more than infrastructure – it's their ...