Have being trying out @jkat54 's Web tool add-on to do some maintenance on ITSI objects with the ITSI REST api. I've managed to do make some of the options work - like enabling and disabling services, but I'm stuck on creating maintenance windows. Thanks to a few other answers (thanks @damianokuen and @kartikaykv1 ) I've managed to succesfully test enable / disabling a service - insert your own <serviceid> without the <> to try: index=itsi_summary | head 1 | eval header="{\"content-type\":\"application/json\"}" | eval data="{\"enabled\": 0,\"_key\":\"<serviceid>\"}" | curl method=post uri=https://localhost:8089/servicesNS/nobody/SA-ITOA/itoa_interface/service/<serviceid>?is_partial_data=1 splunkauth=true debug=false headerfield=header datafield=data Using a standard command line curl I've managed to create a maintenance window (again use your own user / password / server / port / serviceid) curl -k -u <user>:<password> https://<server>:<port>/servicesNS/nobody/SA-ITOA/maintenance_services_interface/maintenance_calendar -X POST -H "Content-Type:application/json" -d "{\"title\":\"TEST MW\",\"start_time\":1589715600,\"end_time\":1589719600,\"objects\":[{\"object_type\":\"service\",\"_key\":\"<serviceid>\"}]} but trying to use this within SPL is failing : index=itsi_summary | head 1 | eval header="{\"content-type\":\"application/json\"}" | eval data="{\"title\":\"TEST MW2\",\"start_time\":1589705600,\"end_time\":1589709600,\"objects\":[{\"object_type\":\"entity\",\"_key\":\"<serviceid>\"}]}" | curl method=post uri=https://localhost:8089//servicesNS/nobody/SA-ITOA/maintenance_services_interface/maintenance_calendar splunkauth=true debug=false headerfield=header datafield=data should be materially the same (barring changing the title so it doesn't duplicate the command line curl), but I get a failure {"message":"(400, 'Objects specified must be a valid non-empty list. Must specify at least one object.')"} I've tried a variety of ways of fiddling with syntax but just can't get it to work - I'm wondering whether the add-on doesn't work nicely with the nested array of objects you need to pass? https://docs.splunk.com/Documentation/ITSI/4.6.1/RESTAPI/ITSIRESTAPIschema#Maintenance_Calendar   ... View more