Run Search with Polling

description executes a long running search in cisco splunk and continuously polls for results until completion or timeout, using the provided 'search string' endpoint url /services/search/jobs method post inputs search string (string) – required the splunk search query string to run example index= internal | head 10 output mode (string) add search (boolean) if true, prepends 'search' to the search string automatically default is true timeout (integer) maximum number of seconds to wait for the search to complete before timing out default is 600 seconds (10 minutes) poll interval (integer) interval in seconds between each status check default is 10 seconds count (number) the maximum number of results to return offset (number) the first result from which to begin returning data output example \[ { "status code" 200, "response headers" { "date" "wed, 04 jun 2025 08 50 29 gmt", "expires" "thu, 26 oct 1978 00 00 00 gmt", "cache control" "no store, no cache, must revalidate, max age=0", "content type" "application/json; charset=utf 8", "x content type options" "nosniff", "link" "< /1749027018 39126>; rel=info", "content length" "166", "vary" "cookie, authorization", "connection" "keep alive", "x frame options" "sameorigin", "server" "splunkd" }, "reason" "ok", "json body" { "preview" false, "init offset" 0, "post process count" 0, "messages" \[ { "type" "info", "text" "your timerange was substituted based on your search string" } ], "results" \[] } } ] output parameters status code (number) reason (string) json body (object) preview (boolean) init offset (number) post process count (number) messages (array) type (string) text (string) results (array) response headers header type date string expires string cache control string content type string x content type options string link string content length string vary string connection string x frame options string server string