Splunk Dev

Why is the Rest API for getting saved searches giving different number of results?

VatsalJagani
SplunkTrust
SplunkTrust

When trying to access saved-searches from python request, not giving actual no of saved searches, many saved searches are missing.

| rest servicesNS/-/-/saved/searches

While accessing the above command from a search bar giving the correct result.

Why are some saved searches not showing while accessing through python requests module? ( I'm accessing with same URL and same user.)

0 Karma

p_gurav
Champion

Hi,

Can you try something like this:

| rest servicesNS/-/-/saved/searches splunk_server=local

Also refer this docs:
http://dev.splunk.com/view/python-sdk/SP-CAAAEK2

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

I also tried this, but when I try it with search it is giving 138 result, but when I try with python I'm getting 30 result. (138 looks correct).

0 Karma

p_gurav
Champion
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...