Splunk Search

Can I get a list of reports from a splunk query?

EricLloyd79
Builder

Is there a way to run a Splunk query to get a list of all reports by using a Splunk query?

1 Solution

Vijeta
Influencer

You can try using rest, the view will be search for reports

|rest /servicesNS/-/-/saved/searches |table request.ui_dispatch_view title

View solution in original post

davidtrujillo
Explorer

Reports are saved searches whose alert type is "always".

Try this:

| rest /servicesNS/-/-/saved/searches | search alert_type = "always"

Vijeta
Influencer

You can try using rest, the view will be search for reports

|rest /servicesNS/-/-/saved/searches |table request.ui_dispatch_view title
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...