Splunk Search

Can I get a list of reports from a splunk query?

EricLloyd79
Builder

Is there a way to run a Splunk query to get a list of all reports by using a Splunk query?

1 Solution

Vijeta
Influencer

You can try using rest, the view will be search for reports

|rest /servicesNS/-/-/saved/searches |table request.ui_dispatch_view title

View solution in original post

davidtrujillo
Explorer

Reports are saved searches whose alert type is "always".

Try this:

| rest /servicesNS/-/-/saved/searches | search alert_type = "always"

Vijeta
Influencer

You can try using rest, the view will be search for reports

|rest /servicesNS/-/-/saved/searches |table request.ui_dispatch_view title
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...