topic Re: Getting Splunk API to return more than 30 deployment clients in Getting Data In

Getting Splunk API to return more than 30 deployment clients

bsonposh — Fri, 31 Dec 2010 02:42:25 GMT

I am using the below URL and it seems to only return 30 clients while the command "splunk.exe list deploy-clients" list over 900.

"https://localhost:8089/servicesNS/nobody/system/admin/deploymentserver/default/default.Clients"

Any thoughts on how I can make this return the full set?

piebob — Fri, 31 Dec 2010 03:59:48 GMT

the endpoints are set to return only 30 results by default. to get all the results, pass count=-1 as a GET argument.

bsonposh — Fri, 31 Dec 2010 22:37:06 GMT

Awesome... thanks!

rroberts — Wed, 24 Aug 2011 17:49:59 GMT

Did you find this in the docs?

bwooden — Tue, 28 Feb 2012 20:54:27 GMT

efavreau — Thu, 12 Apr 2018 18:02:07 GMT

Checked that link for "-1" and it's not in page today.

gjanders — Sat, 14 Apr 2018 23:07:18 GMT

The search reference REST command is documented here
The REST API reference manual documents the above count parameter over here

efavreau — Wed, 18 Apr 2018 17:50:34 GMT

However, the default limit of "30" is mentioned here (find in page "30"):
http://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTprolog

The entry "count" has a description of: "Maximum number of entries to return. Set value to 0 to get all available entries."

However, piebob's answer was the answer for me.