Splunk Search

Is it possible to search a word existing in all the searches of Splunk just like we do in other IDEs?

harry2007gsp
Path Finder

I have multiple searches in splunk which use the same lookup table.
Is it possible I can check among all the searches which search has that lookup table at once instead of going to the code of each search one by one?

0 Karma

elliotproebstel
Champion

You can run this on your search head:

| rest /servicesNS/-/-/saved/searches splunk_server=local 
| search search="* some_lookup_here *"
| table title search

harry2007gsp
Path Finder

Thank you @elliotproebstel

0 Karma

elliotproebstel
Champion

My pleasure! If it works for you, please accept the answer so other users can find the solution, too.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...