<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Is there a way to get ldapsearch to return more than 1000 entries? in All Apps and Add-ons</title>
    <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15325#M122</link>
    <description>&lt;P&gt;This is not directly related to Splunk.&lt;/P&gt;

&lt;P&gt;I'm querying AD and need ldapsearch to return more than 1000 entries.  How can I do this?&lt;/P&gt;</description>
    <pubDate>Fri, 11 Jun 2010 20:49:38 GMT</pubDate>
    <dc:creator>the_wolverine</dc:creator>
    <dc:date>2010-06-11T20:49:38Z</dc:date>
    <item>
      <title>Is there a way to get ldapsearch to return more than 1000 entries?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15325#M122</link>
      <description>&lt;P&gt;This is not directly related to Splunk.&lt;/P&gt;

&lt;P&gt;I'm querying AD and need ldapsearch to return more than 1000 entries.  How can I do this?&lt;/P&gt;</description>
      <pubDate>Fri, 11 Jun 2010 20:49:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15325#M122</guid>
      <dc:creator>the_wolverine</dc:creator>
      <dc:date>2010-06-11T20:49:38Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to get ldapsearch to return more than 1000 entries?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15326#M123</link>
      <description>&lt;P&gt;The real enemy is probably sizeLimit.  In most cases the default sizeLimit is 1000 and any request will be capped at 1000 results.  &lt;/P&gt;

&lt;P&gt;A way to get around is getting "pages" of results.&lt;/P&gt;

&lt;P&gt;Ldapsearch provides an option which allows you to overstep the default paged results setting which is 1000 by default.  Use -E and provide a value of prX/noprompt where X is the new "pagedResults" value and 'noprompt' returns all pages without further user interaction.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;$ ldapsearch -h ldap.host.com -E pr10000/noprompt -x -b "OU=Users,DC=Host,DC=Com" 
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Note that this only works when run against an LDAP server (such as AD) that support paging of results.&lt;/P&gt;</description>
      <pubDate>Fri, 11 Jun 2010 21:08:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15326#M123</guid>
      <dc:creator>the_wolverine</dc:creator>
      <dc:date>2010-06-11T21:08:02Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to get ldapsearch to return more than 1000 entries?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15327#M124</link>
      <description>&lt;P&gt;In my current version of ldapsearch I had luck with&lt;/P&gt;

&lt;P&gt;$ ldapsearch -h ldap.host.com -E pr=10000/noprompt -x -b "OU=Users,DC=Host,DC=Com" &lt;/P&gt;</description>
      <pubDate>Mon, 22 Oct 2012 17:44:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15327#M124</guid>
      <dc:creator>LincolnDeCourse</dc:creator>
      <dc:date>2012-10-22T17:44:04Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to get ldapsearch to return more than 1000 entries?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15328#M125</link>
      <description>&lt;P&gt;Does anyone know if this is yet to be implemented into SA-ldapsearch? I see an option for paged_size but I'm unsure if Splunk is using it correctly. &lt;/P&gt;

&lt;P&gt;I have been able to get this to work from the command line ldapsearch but I haven't seen it work in Splunk..&lt;/P&gt;</description>
      <pubDate>Fri, 29 Jan 2016 13:12:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15328#M125</guid>
      <dc:creator>ryanoconnor</dc:creator>
      <dc:date>2016-01-29T13:12:14Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to get ldapsearch to return more than 1000 entries?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15329#M126</link>
      <description>&lt;P&gt;In which config file we have to put above code?&lt;BR /&gt;
I am facing same problem. One of our group is returning more than 4000 results.,&lt;/P&gt;</description>
      <pubDate>Mon, 25 Mar 2019 09:47:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15329#M126</guid>
      <dc:creator>waytoavnish</dc:creator>
      <dc:date>2019-03-25T09:47:11Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to get ldapsearch to return more than 1000 entries?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15330#M127</link>
      <description>&lt;P&gt;In which config file we have to put above code?&lt;BR /&gt;
I am facing same problem. One of our group is returning more than 4000 results.,&lt;/P&gt;</description>
      <pubDate>Mon, 25 Mar 2019 09:47:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15330#M127</guid>
      <dc:creator>waytoavnish</dc:creator>
      <dc:date>2019-03-25T09:47:30Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to get ldapsearch to return more than 1000 entries?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15331#M128</link>
      <description>&lt;P&gt;Same problem here &lt;/P&gt;</description>
      <pubDate>Thu, 02 May 2019 14:29:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/15331#M128</guid>
      <dc:creator>bjarnedein</dc:creator>
      <dc:date>2019-05-02T14:29:06Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to get ldapsearch to return more than 1000 entries?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/699898#M81102</link>
      <description>&lt;P&gt;This worked for me on my updated version - thanks!&lt;/P&gt;</description>
      <pubDate>Tue, 24 Sep 2024 01:04:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-there-a-way-to-get-ldapsearch-to-return-more-than-1000/m-p/699898#M81102</guid>
      <dc:creator>haraksin</dc:creator>
      <dc:date>2024-09-24T01:04:39Z</dc:date>
    </item>
  </channel>
</rss>

