Getting Data In

How to list all the KV stores /collections via SPL Splunk Search?

zacksoft_wf
Contributor

I want to list all the Kv store collections through SPL. something like below...

| rest /servicesNS/-/- .......

unable to figure out the right rest command and the correct fields .

Would appreciate any guidance..

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Perhaps this REST command will help

| rest /servicesNS/-/-/data/transforms/lookups splunk_server=local 
| search type=kvstore
---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Perhaps this REST command will help

| rest /servicesNS/-/-/data/transforms/lookups splunk_server=local 
| search type=kvstore
---
If this reply helps you, Karma would be appreciated.
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Do you want to list them as in "list their metadata" or you want to list their contents?

Anyway, the REST endpoint to see which connections you have defined is https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTkvstore#storage.2Fcollections.2Fconfi...

Other kvstore-related endpoints are described in the same document. You can't query (about) multiple collections in one call so if you want to do a batch-sweep over multiple collections you'd have to use map (ugh!).

0 Karma

zacksoft_wf
Contributor

want to list their metadata.

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...