- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

masonmorales
Influencer
04-22-2015
08:45 AM
So, I know I can get a list of saved searches by doing:
| rest /servicesNS/-/MYAPP/saved/searches | table title
However, I want to list all saved searches from all Apps (which need to be dynamically discovered). How can I accomplish this?
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

harsmarvania57
Ultra Champion
04-22-2015
09:13 AM
Please use | rest /servicesNS/-/-/saved/searches splunk_server=local
Thanks,
Harshil
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

harsmarvania57
Ultra Champion
04-22-2015
09:13 AM
Please use | rest /servicesNS/-/-/saved/searches splunk_server=local
Thanks,
Harshil
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

masonmorales
Influencer
04-22-2015
09:23 AM
This is what I needed. Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Runals
Motivator
04-22-2015
09:38 AM
I was going to suggest the same. I might suggest looking into the following app. It is a change management/tracker for several Splunk configuration files to include saved searches.
