Splunk Search

Can I get a list of reports from a splunk query?

EricLloyd79
Builder

Is there a way to run a Splunk query to get a list of all reports by using a Splunk query?

1 Solution

Vijeta
Influencer

You can try using rest, the view will be search for reports

|rest /servicesNS/-/-/saved/searches |table request.ui_dispatch_view title

View solution in original post

davidtrujillo
Explorer

Reports are saved searches whose alert type is "always".

Try this:

| rest /servicesNS/-/-/saved/searches | search alert_type = "always"

Vijeta
Influencer

You can try using rest, the view will be search for reports

|rest /servicesNS/-/-/saved/searches |table request.ui_dispatch_view title
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...