Getting Data In

Splunk Rest API call

sibanandapani
New Member

We need to have a rest service to our saved searches, where we can pass the start time and end time and the name of the search and it can trigger the the search. and it should send an email too..will this be possible?

Tags (4)
0 Karma
1 Solution

mhorbul
Explorer

The mentioned doc explains how to create/update/delete "saved search". But seems like that API does not allow to enable/disable action.email and enable/disable a schedule of that search. Am I missing something or I have to go to Web UI and check the checkboxes in order to enable/disable those options ?

0 Karma

mhorbul
Explorer

I am not talking about rescheduling but about enabling "Schedule Alert" feature

http://goo.gl/n9OKfu

and also "Enable Email" checkbox inside

http://goo.gl/7dTI3x

0 Karma

psanford_splunk
Splunk Employee
Splunk Employee
0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...