I have a complex Splunk Dashboard that needs to be updated through REST API. The Dashboard was created manually, so the Dashboard XML is very large with many graphs,charts and complex search queries. I am able to do a GET of the dashboard contents. But when I try to update dashboard via POST and pass entire XML as eai:data, I get the error: Unparsable URI-encoded request data . When I try to pass the xml as file (request.xml) for Curl : curl -ku username:pwd -X POST -H "Content-Type:text/xml" -d 'name=testdashboard' -d 'eai:data=@request.xml' https://my_splunk_url:8089/servicesNS/username/appspace/data/ui/views <?xml version="1.0" encoding="UTF-8"?> <response> <messages> <msg type="ERROR">Error parsing XML on line 1: Start tag expected, '<' not found </msg> </messages> </response> In the request.xml have tried to replace <form> with <form> still no luck. Can someone please advise how to update large complex XML through REST API?
... View more