Getting Data In

API limits to 100 results

sondradotcom
Path Finder

I'm using the API via the php sdk. Things are going well except for one thing -- I can never get more than 100 results. When I'm running a timechart query, for example, for a period of a week and a span of 1 hour, I should get 168 results but it stops at 100. Any thoughts?

Thanks! -S.

Tags (1)

vikiitd
New Member

hi i am facing the same issue with java sdk but don't see a count argument supported for the getResults() function. It only takes a map as a argument. Any idea on how to handle this issue in java sdk. Help much appreciated!

Thanks!

0 Karma

lpolo
Motivator
0 Karma

lpolo
Motivator

I am facing the same issue...

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

To retrieve more than 100 results, you can set the limit higher in the API request using the count argument. For the PHP SDK, you can pass in the count parameter to the getResults() function. To page through the result set, you can use both the offset and count GET arguments to the API.

To make sure that these are being properly passed by the SDK, you should watch what's written to splunkd_access.log and verify that the GET arguments are in the requested URLs.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...