topic API limits to 100 results in Getting Data In

API limits to 100 results

sondradotcom — Wed, 18 Aug 2010 03:26:07 GMT

I'm using the API via the php sdk. Things are going well except for one thing -- I can never get more than 100 results. When I'm running a timechart query, for example, for a period of a week and a span of 1 hour, I should get 168 results but it stops at 100. Any thoughts?

Thanks! -S.

Re: API limits to 100 results

Stephen_Sorkin — Wed, 18 Aug 2010 03:35:59 GMT

To retrieve more than 100 results, you can set the limit higher in the API request using the count argument. For the PHP SDK, you can pass in the count parameter to the getResults() function. To page through the result set, you can use both the offset and count GET arguments to the API.

To make sure that these are being properly passed by the SDK, you should watch what's written to splunkd_access.log and verify that the GET arguments are in the requested URLs.

Re: API limits to 100 results

vikiitd — Sun, 25 Mar 2012 07:04:25 GMT

hi i am facing the same issue with java sdk but don't see a count argument supported for the getResults() function. It only takes a map as a argument. Any idea on how to handle this issue in java sdk. Help much appreciated!

Thanks!

Re: API limits to 100 results

lpolo — Mon, 05 Aug 2013 17:42:17 GMT

I am facing the same issue...

Re: API limits to 100 results

lpolo — Mon, 05 Aug 2013 17:44:34 GMT

I found it:
http://splunk-base.splunk.com/answers/43907/change-default-limit-of-100-results-using-java-sdk