About kraber

kraber · ‎03-25-2014

A simple keyword search did work and returned results. I attempted to use their REST implementation and left out the "search" No dice.

kraber · ‎03-21-2014

Leaving off the pipe returns no results. Adding "Search |" throws the same error text as just having the pipe. I dug through the Search-Splunk command, it prepends/adds the implied search when in invokes the REST API. I also tried using the REST API with the format of how Search-Splunk is coded with no success.

kraber · ‎03-20-2014

I'm trying to use the PowerShell Splunk SDK to gather information that we have saved in a lookup file. When I attempt to search with Search-Splunk -Search "| inputlookup file.csv" I receive the following error message: Error in 'inputlookup' command: This command must be the first command of a search. Also, Unexpected XML declaration. The search in double quotes works fine from the web interface, but fails when using the PowerShell SDK. Is this an issue with how the REST API handles searches? Has anyone come across this before or know of any solutions? Thank you.

Posts	3
Solutions	0
Karma Given	0
Karma Received	3
Member Since	‎03-20-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Splunk search with PowerShell SDK using inputlooup

Re: Splunk search with PowerShell SDK using inputl...

Re: Splunk search with PowerShell SDK using inputl...

Splunk search with PowerShell SDK using inputlooup

Join the Conversation

Splunk search with PowerShell SDK using inputlooup

Re: Splunk search with PowerShell SDK using inputl...

Re: Splunk search with PowerShell SDK using inputl...

Splunk search with PowerShell SDK using inputlooup