Connectors
...
Actions
Dispatch Name Saved Search
4 min
description executes a predefined saved search in cisco splunk using the 'name' parameter provided in the path endpoint url /services/saved/searches/{{name}}/dispatch method post inputs data body (object) – required args index name (string) arg values to create a saved search is the saved search if a template search dispatchas (string) indicate the user context, quota, and access rights for the saved search the saved search runs according to the context indicated dispatch now (boolean) dispatch the search as if the specified time for this parameter was the current time dispatch adhoc search level (string) the level of adhoc search to run the default is smart, which runs the search at the level specified in the saved search force dispatch (boolean) indicates whether to start a new search even if another instance of this search is already running trigger actions (string) indicates whether to trigger alert actions replay speed (number) indicate a real time search replay speed factor for example, 1 indicates normal speed 0 5 indicates half of normal speed, and 2 indicates twice as fast as normal earliest time and latest time arguments must indicate a real time time range to use replay options replay et (string) relative "wall clock" start time for the replay replay lt (string) relative end time for the replay clock the replay stops when clock time reaches this time path parameters (object) – required name (string) – required the name of the saved search to dispatch output example \[ { "status code" 200, "response headers" {}, "reason" "ok", "json body" {} } ] output parameters status code (number) reason (string) json body (object)