I have installed splunk on my pc (windows7) and start to play with REST web service calls to perform search. I can see search results in my online search page but not in the web service call. Any clue on what the issues may be? Thanks.
This is the command I use:
curl -k -u admin: https://localhost:8089/services/search/jobs/export -d outputmode=xml -d execmode=oneshot -d earliesttime=-60m -d latesttime=now -d search="search *"
The web service returned the following message:
<?xml version='1.0' encoding='UTF-8'?> <results preview='0'> <meta> <fieldOrder /> </meta> <messages> <msg type="DEBUG">Configuration initialization for C:\Program Files\Splunk\etc took 31ms when dispatching a search (search ID: 1489446839.10)</msg> <msg type="DEBUG">base lispy: [ AND ]</msg> <msg type="DEBUG">search context: user="admin", app="search", bs-pathname="C:\Program Files\Splunk\etc"</msg> </messages> </results> <results preview='0'> <meta> <fieldOrder /> </meta> </results>
Please close this question since the issue has been resolved. The issue was with using SOAPUI to replicate a curl command.
@teresa1688 - Glad to find that you figured out the solution. Please don't forget to click "Accept" to close out your question. Thank you.