Splunk Search

Does the REST API allow to retrieve the XML source code of Classic Dashboards?

danielbb
Motivator

I sometimes lose the source code of a dashboard, and therefore, I wonder if I can automatically take a backup of my dashboards within time intervals by using the REST API, is this possible? Or is there by any chance already an existing app for this?

Labels (1)
Tags (1)
0 Karma

bowesmana
SplunkTrust
SplunkTrust

We have saved searches that run in certain sites that collect knowledge objects, dashboards, macros and so on, using the rest API as shown by @livehybrid. It writes the data to a summary index if the data has changed. Runs reasonably frequently, so there's always a recent backup to go back to if necessary.

 

livehybrid
SplunkTrust
SplunkTrust

Hi @danielbb 

Have a look at this:

| rest /servicesNS/-/-/data/ui/views | search eai:acl.app="<yourAppName>" version!="2" | table title eai:data

livehybrid_0-1763586931083.png

 

The 'eai:data' field contains the source code of the dashboard. The version field is 2 for Dashboard Studio or 1/1.1 for Classic dashboards.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Monitoring AI Agents with Splunk Observability Cloud

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

[Puzzles] Solve, Learn, Repeat: Tiling

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...