Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Why are we getting a different result running a search via REST API call versus emailed results from a saved search?

$
0
0
So, I have a customer that is running the same search via different methods ... He is running it via an API call as well as a saved search that is emailing the results to his team. Problem is that the results are different and I have no clue why. Some thing to consider ... - Customer has created field extractions for some values that are being returned - We have created an app/container for his team to use In Summary we have fields that are app specific, and how can we keep app context when running a search via the REST API? Thanks.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>