I'm calling REST to submit a job search and always it considers All Time and ignores the earliest..
Is there anything wrong in the search query i am posting?
search=search "index=center host=center* AND sourcetype=abf:afz.log "DebugLogSubmission" "time" earliest=-24h@h | rex time=(?[\d]+) |table _time mytime | head 100"
Straight from the docs....
You need to send the earliestTime param:
https://docs.splunk.com/Documentation/Splunk/8.0.1/RESTREF/RESTsearch#search.2Fjobs