index=<<My_index>> earliest="12/23/2020:10:00:00" latest="12/23/2020:11:00:00" "<<url>>" | eval MyFeild=replace(MyFeild,"\d{1}\d+","") | search MyFeild=*sample_search* | stats count by MyFeild When I have been using the above search criteria in UI , it gives the a table in Statistics tab with MyFeild and its total Count when I am using the splunkapi for some reason I am not getting the consolidated ouput https://<<mydomain for my splunkapi>>/services/search/jobs/export?search=search index=<<My_index>> earliest="12/23/2020:10:00:00" latest="12/23/2020:11:00:00" "<<url>>" | eval MyFeild=replace(MyFeild,"\d{1}\d+","") | search MyFeild=*sample_search* | stats count by MyFeild Not sure If I am missing anything here
... View more