Splunk Search

Search for all apps and dashboards on a server

actionabledata
Path Finder

How do I search for all apps and dashboards on a server and yield a table with author, app name, description, actual linux file name of dashboards within each app, revision #, and date last updated? Thank you

I played around with the following code but it doesn't give everything I need

 

 

| rest /services/apps/local | search disabled=0 | table author  label version description title id label version

 

 


I think I need to go learn REST APIs for Splunk

Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

As I said when this question was asked yesterday, the solution requires more than one REST call - one for apps and one for dashboards ("views").  Additional calls may be needed to enrich the results.

It may not be possible to get all the data you seek.  For instance, date last updated is not always available.  A value may be returned, but it's frequently zero.  Other values, like the Linux file name, can be derived from other fields.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

As I said when this question was asked yesterday, the solution requires more than one REST call - one for apps and one for dashboards ("views").  Additional calls may be needed to enrich the results.

It may not be possible to get all the data you seek.  For instance, date last updated is not always available.  A value may be returned, but it's frequently zero.  Other values, like the Linux file name, can be derived from other fields.

---
If this reply helps you, Karma would be appreciated.

actionabledata
Path Finder

I apologize for not seeing your previous answer ... I still do not see it although it may be to another person. I will research REST calls.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...