We have created http event with below command: http://localhost:8088/services/collector Body: { "sourcetype":"trial", "event":"ITSM1", "fields": { "discription":"ITSM1 inserting data", "urgency":"High" } } This data is visible on splunk enterprise. Now we are trying to search this event using criteria as Urgency = High . but it didn't return any event. We tried using curl command still same result. Can you suggest what could be the issue? C:\Users\terminal>curl -k -u username:Password https://localhost:8089/services/search/jobs -d output_mode="json" -d search="search index=main urgency=high" {"sid":"1599554403.2242"} C::\Users\terminal>curl -k -u username:Password :username:Password https://localhost:8089/services/search/jobs/1599554403.2242/events --get -d output_mode="json" output: "preview":false, "init_offset":0, "messages":[ ],
... View more