after upgrade to 4.0.2 we cannot use rest api search export:
rest api call ‘api/search/universal/keyword/export?query=%22sshd%22&keyword=%22yesterday%22&batch_size=500&fields=timestamp’ get 0 records back
if we use the call ‘api/search/universal/keyword?query=“sshd”&keyword=“yesterday”&batch_size=500&fields=timestamp%2Csource%2Cmessage’ we are see the messages but in json format
was the export disabled in 4.0.2 or is it a bug?
Update: if we set limit=-1 then we get records but this field is not necessary according to documentation