savedsearch
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
savedsearch
Synopsis
Returns the search results of a saved search.
Syntax
savedsearch string [savedsearch-opt]*
Arguments
- savedsearch-opt
- Syntax: <savedsearch-macro-opt>|<savedsearch-replacement-opt>
- Description: The saved search options lets you specify either no substitution or the key/value pair to use in the macro replacement.
- savedsearch-macro-opt
- Syntax: nosubstitution=<bool>
- Description: If true, no macro replacements are made. Defaults to false.
- savedsearch-replacement-opt
- Syntax: <string>=<string>
- Description: A key/value pair to use in macro replacement.
Description
Runs a saved search, possibly cached by disk. Also, performs macro replacement.
Examples
Example 1: Run the "mysecurityquery" saved search.
| savedsearch mysecurityquerySee also
This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10 , 4.0.11 View the Article History for its revisions.