topic Why is Splunk rest api result not returning aggregated field? in Getting Data In

Why is Splunk rest api result not returning aggregated field?

santoshbwn — Wed, 01 Jun 2022 15:16:03 GMT

search index=abc dp_"response"| stats perc95(api_time_taken) as abc by api

This is the search query I am using while invoking through splunk rest API.

In the result, I am not getting the abc field, only the API values are listed . Is there anything specific I need to do to include perc95,avg or max values in the result.

From UI, it works completely fine where it shows the abc column with the 95 percentile value

If someone can guide me, it would be really helpful.

Thanks,

Santosh

Thank,

Santosh

Re: Splunk rest api result not returning aggregated field

kilimche — Tue, 31 May 2022 16:24:54 GMT

Hi, any update on your issue, Im facing similar problem when reading from SPLUNK Rest APi via ADF using

I see the correct result via UI but only the summary in the ADF result

Re: Why is Splunk rest api result not returning aggregated field

kilimche — Wed, 01 Jun 2022 06:52:15 GMT

Hi, @santoshbwn any update on your issue?