Hello, I am trying to do a search query using JSON. It works if I use the normal form format, but not JSON.
Working command: curl -u $USER-k https://<URL>/services/search/jobs/export -d search="search index=myIndex sourcetype=activitylog EVENT=START | dedup USER | stats count"
Not working command: curl -u $USER--header "Content-Type: application/json" --request POST --data '{"search":"search index=myIndex sourcetype=activitylog EVENT=START | dedup USER | stats count"}' https://<URL>/services/search/jobs/export
--> Reports: <msg type="FATAL">Empty search.</msg>
Any ideas why the JSON format doesnt work? thanks!