Getting Data In

Cropped results for inputlookup via REST ?

szabados
Communicator

I'm trying to run search via the REST api, to get the contents of a lookup:

| inputlookup my_lookup

I got only 100 rows in the results, which is weird, because my lookup is much bigger. I've checked in limits.conf, I'm using the default setting - 50000 rows.
Is there something with lookups? Any other search queries I did with REST worked as expected. I wasn't able to find indicator for this limitation in the HTTP requests/responses used for the search.

0 Karma

szabados
Communicator
0 Karma

woodcock
Esteemed Legend

Click Accept to close the question.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...