Splunk Search

Saved Searches

siva_kumar0147
Explorer

Hello all,

Actually i have been using rest command 

| rest /servicesNS/-/MYAPP/saved/searches | table title

to call my saved searches and now we created a dashboard to updated this saved search manually, but the scenario is to paste the entire query dynamically and run it, when the saved is updated in backend the same should be reflecting here.

Thanks in advance and best regards.

Tags (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @siva_kumar0147 

If you have created a dashboard based on the REST call then whenever you load the dashboard it will show the current details of your saved searches, you shouldnt need to make any updates to the dashboard when your saved searches are updated elsewhere.

I hope I have understood your question, but please let me know if I can help further.

Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards

Will

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It is not clear what your issue is here, nor what exactly you are doing and what is perhaps not working for you. Please can you provide more details and examples of what you are doing and the the results you are getting and explain why it is not what you expected/wanted.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...