Hi Team, While exploring Splunk documentation and few scenarios , noticed that there is Rest approach to extract  saved one.  But i would like to extract unsaved ( adhoc ) searches performed to understand patterns and load 1. Unsaved searches performed on given index or all indexes along with the query used.  I found below threads which can be used to fetch saved searches  https://community.splunk.com/t5/Splunk-Search/How-can-I-get-a-list-of-all-saved-searches-from-all-apps-using/m-p/162615  https://community.splunk.com/t5/Splunk-Search/Listing-all-saved-searches-from-all-apps-via-REST-without/m-p/508688 Is there any Rest based query which can be used for extracting to find adhoc searches performed on splunk to understand load patterns.       ... View more

Hi Team,   Is there any way to use REST syntax and retrieve the following. 1. Rest Query to retrieve all unique searches performed on a given index and count no of times it was searched     ... View more

Hi Team,   I would like to retrieve following info through Splunk search    1. List of all splunk searches performed on a single index along with the user list along with timestamp of search performed for a given period ( 1 month or 1 year )     ... View more

Hi Team,   Is there any way to pull last 1000 searches performed on a particular index along with the user who performed that search 1. Splunk Query i am looking for    2. Rest Query i am looking for    I am running on Splunk 8.0  ... View more