Hi All - I am new to splunk python SDK and am stuck with running saved searches for custom durations. So far, using the splunk documentation and examples I am able to execute saved searches using the python SDK, however I couldn't find a way to set the earliest/latest time parameters. Whatever the value I set the default duration for the saved search is used. Here is a snippet of what I have so far :
args = {"earliest_time":"-d60"}
job = searchName.dispatch(**args)
Tried this as well: args = {"earliestTime":"-d60"}
Is there a way to set custom duration for saved searches using python sdk?
Thanks.
... View more