So, I know I can get a list of saved searches by doing:
| rest /servicesNS/-/MYAPP/saved/searches | table title
However, I want to list all saved searches from all Apps (which need to be dynamically discovered). How can I accomplish this?
Please use | rest /servicesNS/-/-/saved/searches splunk_server=local
Thanks,
Harshil
Please use | rest /servicesNS/-/-/saved/searches splunk_server=local
Thanks,
Harshil
This is what I needed. Thanks!
I was going to suggest the same. I might suggest looking into the following app. It is a change management/tracker for several Splunk configuration files to include saved searches.