I need to update many params in many saved searches via POST API from nodejs. I can create alerts, but cannot update all the params (including spl search) via POST to this endpoint https://${HOST}:8089/servicesNS/${USERNAME}/${APP}/saved/searches/${ALERTNAME} Error message is: cannot create .. savedsearch by the name already exists. Is there an endpoint to update (POST/PUT) all the params (in GUI)? I was able to update only some params using splunk javascript/python3 sdk, but it doesn't support many of the advanced params and is very slow compared to the POST API, and some of the params names are different? Some examples (with all supported params by sdk (JS/Python3 and API) would be helpful.
... View more