I found the answer to my question: "splunk:8089/servicesNS/-/-/saved/searches?count=100" I do not know why this is not included in the documentation as it clearly states, "List all saved searched on this Splunk instance" for the below command. curl -k -u admin:pass "localhost:8089/services/saved/searches" ... View more