Getting Data In

Getting Splunk API to return more than 30 deployment clients

bsonposh
Communicator

I am using the below URL and it seems to only return 30 clients while the command "splunk.exe list deploy-clients" list over 900.

"https://localhost:8089/servicesNS/nobody/system/admin/deploymentserver/default/default.Clients"

Any thoughts on how I can make this return the full set?

1 Solution

piebob
Splunk Employee
Splunk Employee

the endpoints are set to return only 30 results by default. to get all the results, pass count=-1 as a GET argument.

View solution in original post

piebob
Splunk Employee
Splunk Employee

the endpoints are set to return only 30 results by default. to get all the results, pass count=-1 as a GET argument.

bwooden
Splunk Employee
Splunk Employee

@rroberts, I am unsure if it was available at time of ask, but it is available now: http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTdeploy#GET_deployment.2Fserver

efavreau
Motivator

Checked that link for "-1" and it's not in page today.

###

If this reply helps you, an upvote would be appreciated.
0 Karma

efavreau
Motivator

The literal text of "-1" is not in either link:
- http://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTprolog
- http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Rest

However, the default limit of "30" is mentioned here (find in page "30"):
http://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTprolog

The entry "count" has a description of: "Maximum number of entries to return. Set value to 0 to get all available entries."

However, piebob's answer was the answer for me.

###

If this reply helps you, an upvote would be appreciated.
0 Karma

gjanders
SplunkTrust
SplunkTrust

The search reference REST command is documented here
The REST API reference manual documents the above count parameter over here

0 Karma

rroberts
Splunk Employee
Splunk Employee

Did you find this in the docs?

bsonposh
Communicator

Awesome... thanks!

Get Updates on the Splunk Community!

Splunk Certification Support Alert | Pearson VUE Outage

Splunk Certification holders and candidates!  Please be advised of an upcoming system maintenance period for ...

Enterprise Security Content Update (ESCU) | New Releases

In September, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...