Dear Team,
I have imported one csv File and searched using the Portal(8000) and REST API(8089), REST API is not working because of the *CustomField*, this is one of the field name in the csv file, please find below the details, Kindly advice on this. Thanks in advance.
**Url:**
https://localhost:8089/services/search/jobs
**Header:**
Authorization:Splunk 3nUbDwfNUWdQ^7zb5sI6l2xXAqZ^U4xK4fEBinNarM7jvOs4^bAOBNyA1LsBy5ev2I2dXmZE6aThm_MPf3gCG7B9XnGlalyvj4HWaaa
Content-Type:application/x-www-form-urlencoded
**Body:**
search:search sourcetype=csv
*CustomField:fc3aa216*
Response:
Returns all rows, instead of returning the rows contains CustomField=fc3aa216
But if i do the same using the portal its working fine,
http://localhost:8000/en-US/app/search/search
sourcetype="csv" CustomField="fc3aa216"
↧