All Apps and Add-ons

searching via REST API for fields containing '.' fails to return results

rbecker
New Member

We've got splunk enterprise at the company I work for, and I coded up a REST api client to make searching splunk a bit more convenient.  The client works just fine, except for one case;  any search that specifies a field including '.' returns zero results.    Other searches via the REST API work perfectly.  Anyone got a clue what may be going on?

Labels (1)
0 Karma

rbecker
New Member

Urk, to be more specific- this is about field names which include `.`;  so `params.jsonapi.version` does not work for example.

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...