# Use saved saved search template with http\_poller

**URL:** <https://discuss.elastic.co/t/use-saved-saved-search-template-with-http-poller/90324>\
**Category:** Logstash\
**Created:** [June 21, 2017, 3:38pm UTC](https://discuss.elastic.co/t/use-saved-saved-search-template-with-http-poller/90324 "2017-06-21T15:38:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![adonahoe](https://avatars.discourse-cdn.com/v4/letter/a/eb9ed0/32.png) [@adonahoe](https://discuss.elastic.co/u/adonahoe)\
**Post date:** [June 21, 2017, 3:38pm UTC](https://discuss.elastic.co/t/use-saved-saved-search-template-with-http-poller/90324/1 "2017-06-21T15:38:46Z")

</div>

Hi,

I am attempting to call a saved search with http\_poller and currently cannot figure it out. Was wondering if any others have run into this issue before? My config is below:

Search Template:  
PUT \_search/template/ip-test

```
"template": {
    "query": {
        "match": {
            "type": "ip"
        }
   }

```

My logstash config:

```
input {
    http_poller {
        urls => {
            url=> {
                method => get
                url => "http://localhost:9200/_search/template"
                headers => {
                    "content-type" => "application/json",
                    "id" => "ip-test"
                }
                auth => {
                    user => "elastic"
                    password => "changeme"
                }
           }
        }
        keepalive => true
        schedule => { cron => "* * * * * UTC" }
        codec => "line"
        metadata_target => "http_poller_metadata"
    }
}
output {
stdout{ codec => rubydebug }
}
```

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [June 24, 2017, 7:07pm UTC](https://discuss.elastic.co/t/use-saved-saved-search-template-with-http-poller/90324/2 "2017-06-24T19:07:12Z")

</div>

In what way doesn't this work? What happens?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 22, 2017, 7:07pm UTC](https://discuss.elastic.co/t/use-saved-saved-search-template-with-http-poller/90324/3 "2017-07-22T19:07:43Z")

</div>

Closed on July 22, 2017, 7:07pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.