https://community.splunk.com/t5/Knowledge-Management/How-to-get-kvstore-values-with-the-command-rest/m-p/491162#M4398 <P>Hi, thanks for the info! Could you provide a query in Splunk for this? Thanks in advance.</P> Mon, 30 Sep 2019 14:09:17 GMT pbalbasm 2019-09-30T14:09:17Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-kvstore-values-with-the-command-rest/m-p/491160#M4396 <P>Hi all,</P> <P>I'm currently retrieving lookups from another SH in this way:</P> <PRE><CODE>| rest splunk_server=server_name splunk_server_group=* /services/search/jobs/export search=" | inputlookup my_lookup.csv" output_mode=csv </CODE></PRE> <P>This produces 2 columns, <EM>splunk_server</EM> and <EM>value</EM></P> <P>The problem I'm facing is when I'm trying to do the same with a kvstore I'm not getting anything in the field <EM>value</EM>. Is it any way to retrieve the kvstore information in the same way?</P> <P>Thanks in advance.</P> Mon, 30 Sep 2019 07:58:07 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-kvstore-values-with-the-command-rest/m-p/491160#M4396 pbalbasm 2019-09-30T07:58:07Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-kvstore-values-with-the-command-rest/m-p/491161#M4397 <P><A href="https://splunkbase.splunk.com/app/3519/">https://splunkbase.splunk.com/app/3519/</A></P> <P>Or borrow from the original code:<BR /> <A href="https://github.com/georgestarcher/TA-SyncKVStore">https://github.com/georgestarcher/TA-SyncKVStore</A></P> Mon, 30 Sep 2019 13:53:24 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-kvstore-values-with-the-command-rest/m-p/491161#M4397 starcher 2019-09-30T13:53:24Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-kvstore-values-with-the-command-rest/m-p/491162#M4398 <P>Hi, thanks for the info! Could you provide a query in Splunk for this? Thanks in advance.</P> Mon, 30 Sep 2019 14:09:17 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-kvstore-values-with-the-command-rest/m-p/491162#M4398 pbalbasm 2019-09-30T14:09:17Z