The Splunk REST API • Room 2

Namespaces & Object Management

Every Splunk knowledge object (saved search, dashboard, lookup) exists within a namespace defined by `owner`, `app`, and `sharing` level.

The URI pattern is: `/servicesNS/{owner}/{app}/{endpoint}`. For example, `/servicesNS/admin/search/saved/searches` lists saved searches owned by "admin" in the "search" app.

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

Drag items to their correct zone (or tap item then tap zone on mobile)

Object is visible only to its creator

Object is visible to all users within the same app

Object is visible across all apps and users

Uses the wildcard "-" for owner and app

Private (user) sharing

App sharing

Global sharing

System-wide REST query