Getting Data In

Splunk Rest API call

sibanandapani
New Member

We need to have a rest service to our saved searches, where we can pass the start time and end time and the name of the search and it can trigger the the search. and it should send an email too..will this be possible?

Tags (4)
0 Karma
1 Solution

mhorbul
Explorer

The mentioned doc explains how to create/update/delete "saved search". But seems like that API does not allow to enable/disable action.email and enable/disable a schedule of that search. Am I missing something or I have to go to Web UI and check the checkboxes in order to enable/disable those options ?

0 Karma

mhorbul
Explorer

I am not talking about rescheduling but about enabling "Schedule Alert" feature

http://goo.gl/n9OKfu

and also "Enable Email" checkbox inside

http://goo.gl/7dTI3x

0 Karma

psanford_splunk
Splunk Employee
Splunk Employee
0 Karma

psanford_splunk
Splunk Employee
Splunk Employee
0 Karma
Get Updates on the Splunk Community!

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...