×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
dibblel
Engager
Member since: ‎01-29-2013
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 5
Member Since ‎01-29-2013
Activity Feed
View All

Re: Using Splunk REST to list "saved searches" onl...

by in Reporting
‎10-22-2013 08:52 AM
3 Karma
‎10-22-2013 08:52 AM
3 Karma
I found the answer to my question: "splunk:8089/servicesNS/-/-/saved/searches?count=100" I do not know why this is not included in the documentation as it clearly states, "List all saved searched on this Splunk instance" for the below command. curl -k -u admin:pass "localhost:8089/services/saved/searches" ... View more

Using Splunk REST to list "saved searches" only re...

by in Reporting
‎10-22-2013 08:19 AM
2 Karma
‎10-22-2013 08:19 AM
2 Karma
The Splunk API appears to be limiting the number of "saved searches" returned. I am running the query with our admin account so I do not believe it is a permissions issue. However, I did notice if I adjust a query to GLOBAL it appears to show up in the list. Is there not a way to show ALL saved searches? Example query: curl -k -u admin:$PASS "splunk:8089/servicesNS/admin/search/saved/searches?count=100" curl -k -u admin:$PASS "splunk:8089/services/saved/searches?count=100" Thanks! ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma from