I'm trying to search a query and retrieve the results through REST API, and it returns zero results. Below queries, i am using to submit the search, check the status of the dispatch, and retrieve the results.
https://splunk.corp.net:8089/servicesNS/admin/search/search/jobs
https://splunk.corp.net:8089/services/search/jobs/{{sid}}?output_mode=json
https://splunk.corp.net:8089/services/search/jobs/{{sid}}/results
The same query executed from the Splunk UI, returns the results. Also, the UI returns results in a fraction of second, but in case of REST API, it takes more than ~5 minutes to complete the search (dispatchState = DONE) and returns zero results.
Its is the same case for any search i do with REST API.
Any idea, what am I doing wrong here?
