Re: Event count from REST API against the splunk w...

chasrini · ‎12-09-2018

Event count from REST API against the splunk web UI not matching - If I rerun the count matches. I am running for 5 consecutive days through REST API and get all the events. I match the count against splunk web ui. for some dates, the count doesnt match. later if i rerun for those dates separately, then it matches.

myriadic · ‎12-10-2018

Is it a search head cluster? Also, how far apart are the numbers and can you share the search?

Event count from REST API against the splunk web UI not matching - If I rerun the count matches

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Calling All Security Pros: Ready to Race Through Boston?

Are you a member of the Splunk Community?

Event count from REST API against the splunk web UI not matching - If I rerun the count matches

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Calling All Security Pros: Ready to Race Through Boston?