Splunk Search
Highlighted

How do I query a macro for it's definition?

Path Finder

I would like to query an app's macros and return the macro attributes such as the name and the definition. Can someone point me in the right direction?

Tags (3)
Highlighted

Re: How do I query a macro for it's definition?

SplunkTrust
SplunkTrust

Try

| rest services/configs/conf-macros|table definition args
Highlighted

Re: How do I query a macro for it's definition?

Splunk Employee
Splunk Employee
| rest /servicesNS/-/-/admin/macros splunk_server=local | search title=<name of macro>