I have found these two endpoints related to saved searches
https://<host>:<mPort>/services/saved/searches
This provides the list of all the saved services in the instance
https://<host>:<mPort>/services/saved/searches/{name}
This provides the search configurations and the SPL query used to create the particular saved search. I would like to know if there is any particular API endpoint to get the data within the created saved search.
... View more
I used the Splunk Enterprise Trail version to test out the APIs When I tried to get a particular saved search by entering its name I can get the correct result. But when I tried to get all the saved searches in the instance. using https://localhost:8089/servicesNS/<user>/-/saved/searches/ I could not get the records. Can you please help me?
... View more