Dear Team,
I have imported one csv file and searched using the sourcetype & customfield(one column header in the csv file), its working fine in the Portal (8000),
If i do the same using the REST API (8089), i am getting all rows instead of rows that contains customfield value itself, please find below the details,
**URL:**
https://localhost:8089/services/search/jobs
**Method:**
POST
**Header:**
Authorization:Splunk 3nUbDwfNUWdQ^7zb5sI6l2xXAqZ^U4xK4fEBinNarM7jvOs4dgdfgdfgdfgnGlalyvj4HWrcWz
Content-Type:application/x-www-form-urlencoded
**Body:**
search:search sourcetype=csv
*customfield:fc3aa216*
Kindly advice on this. Thanks in advance.
↧