Splunk Search

How to use the REST API to run a multisearch and stream the results back?

arunslal
Loves-to-Learn Lots

Hi,

I am able to run normal search using rest API using below syntax:

 

https://SearchHead_host:8089/servicesNS/admin/search/search/jobs/export -d search=“search index%3D_internal | head 3” -d output_mode=csv/xml/json

 

But when I use a "MULTISEARCH" query, the search doesn't show any results.

Does anyone know how to overcome this?

Thanks,

Arun

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you run the multisearch query from the GUI to verify it works?

---
If this reply helps you, Karma would be appreciated.
0 Karma

arunslal
Loves-to-Learn Lots

Hi, yes. UI returns results on screen.

0 Karma
Get Updates on the Splunk Community!

Splunk App for Anomaly Detection End of Life Announcment

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...