I have installed splunk on my pc (windows7) and start to play with REST web service calls to perform search. I can see search results in my online search page but not in the web service call. Any clue on what the issues may be? Thanks.
This is the command I use:
curl -k -u admin: https://localhost:8089/services/search/jobs/export -d output_mode=xml -d exec_mode=oneshot -d earliest_time=-60m -d latest_time=now -d search="search *"
The web service returned the following message:
<?xml version='1.0' encoding='UTF-8'?>
<results preview='0'>
<meta>
<fieldOrder />
</meta>
<messages>
<msg type="DEBUG">Configuration initialization for C:\Program Files\Splunk\etc took 31ms when dispatching a search (search ID: 1489446839.10)</msg>
<msg type="DEBUG">base lispy: [ AND ]</msg>
<msg type="DEBUG">search context: user="admin", app="search", bs-pathname="C:\Program Files\Splunk\etc"</msg>
</messages>
</results>
<results preview='0'>
<meta>
<fieldOrder />
</meta>
</results>
... View more