topic Re: The REST API brings back default configuration values in Splunk Search

Why is the REST API bringing back default configuration values?

danielbb — Thu, 30 Mar 2023 14:59:42 GMT

The REST API seems to return default values for max_searches_per_cpu, while the btool command brings back the actual values.

| rest splunk_server=* /services/search/concurrency-settings/search | table *

Any thoughts?

yeahnah — Wed, 29 Mar 2023 21:54:44 GMT

Hi @danielbb

Strange, it matched for me OK (v8.2.7)

btool query

 splunk btool limits list --debug | grep max_searches_per_cpu

Splunk query

| rest splunk_server=* /services/search/concurrency-settings/search | stats max(max_searches_per_cpu) BY splunk_server

Have you recently made a change to this setting?