https://community.splunk.com/t5/Getting-Data-In/Cropped-results-for-inputlookup-via-REST/m-p/322914#M60117 <P>I'm trying to run search via the REST api, to get the contents of a lookup:</P> <P>| inputlookup my_lookup</P> <P>I got only 100 rows in the results, which is weird, because my lookup is much bigger. I've checked in limits.conf, I'm using the default setting - 50000 rows.<BR /> Is there something with lookups? Any other search queries I did with REST worked as expected. I wasn't able to find indicator for this limitation in the HTTP requests/responses used for the search.</P> Wed, 31 May 2017 07:34:44 GMT szabados 2017-05-31T07:34:44Z https://community.splunk.com/t5/Getting-Data-In/Cropped-results-for-inputlookup-via-REST/m-p/322914#M60117 <P>I'm trying to run search via the REST api, to get the contents of a lookup:</P> <P>| inputlookup my_lookup</P> <P>I got only 100 rows in the results, which is weird, because my lookup is much bigger. I've checked in limits.conf, I'm using the default setting - 50000 rows.<BR /> Is there something with lookups? Any other search queries I did with REST worked as expected. I wasn't able to find indicator for this limitation in the HTTP requests/responses used for the search.</P> Wed, 31 May 2017 07:34:44 GMT https://community.splunk.com/t5/Getting-Data-In/Cropped-results-for-inputlookup-via-REST/m-p/322914#M60117 szabados 2017-05-31T07:34:44Z https://community.splunk.com/t5/Getting-Data-In/Cropped-results-for-inputlookup-via-REST/m-p/322915#M60118 <P>Already solved here:<BR /> <A href="https://answers.splunk.com/answers/208682/rest-api-why-am-i-hitting-a-limit-of-100-exported.html">https://answers.splunk.com/answers/208682/rest-api-why-am-i-hitting-a-limit-of-100-exported.html</A></P> Wed, 31 May 2017 08:22:13 GMT https://community.splunk.com/t5/Getting-Data-In/Cropped-results-for-inputlookup-via-REST/m-p/322915#M60118 szabados 2017-05-31T08:22:13Z https://community.splunk.com/t5/Getting-Data-In/Cropped-results-for-inputlookup-via-REST/m-p/322916#M60119 <P>Click <CODE>Accept</CODE> to close the question.</P> Wed, 31 May 2017 15:26:01 GMT https://community.splunk.com/t5/Getting-Data-In/Cropped-results-for-inputlookup-via-REST/m-p/322916#M60119 woodcock 2017-05-31T15:26:01Z