Trying to automate “saved searches” using the API, as we have multiple Graylog clusters and will save a lot of time manually setting searches up for each Graylog instance.
Currently using version 3.3.4, it seems that the current version of the API has moved “/search/saved” to “/legacy/search/saved”, and also removed the POST method to create new saved searches, you can only GET or DELETE.
Instead, there is a new “/views/search” API which accepts the following data:
parameters (array[object], optional),
id (string, optional),
queries (array[object], optional),
owner (string, optional),
created_at (string, optional),
requires (object, optional)
But I don’t think this is the correct replacement API for creating saved searches. But using GET method will correctly list saved searches, so it’s confusing.
How can I use the API in current version to create saved searches?