topic Re: How do I limit the fields returned by Splunk's REST handlers? in Security

How do I limit the fields returned by Splunk's REST handlers?

LukeMurphey — Thu, 06 Dec 2018 20:19:37 GMT

I am attempting to use Splunk's REST handlers. In my case, the REST handler returns lots of fields that I don't need. This causes a lot of data to be transmitted between the browser and Splunk. Is there a way to limit the fields returned?

Re: How do I limit the fields returned by Splunk's REST handlers?

LukeMurphey — Thu, 06 Dec 2018 20:21:09 GMT

Yes, this can be done. Use the "f" parameter to only return the field you care about. Include the parameter for each field you want if you want more than one.

Something like this:

storage/passwords?f=name&f=eai:acl&f=username&f=realm