How to list all the KV stores /collections via SPL Splunk Search?

[zacksoft_wf]

I want to list all the Kv store collections through SPL. something like below...

| rest /servicesNS/-/- .......

unable to figure out the right rest command and the correct fields .

Would appreciate any guidance..

[richgalloway · Accepted solution]

Perhaps this REST command will help

| rest /servicesNS/-/-/data/transforms/lookups splunk_server=local 
| search type=kvstore

[PickleRick]

Do you want to list them as in "list their metadata" or you want to list their contents?

Anyway, the REST endpoint to see which connections you have defined is https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTkvstore#storage.2Fcollections.2Fconfi...

Other kvstore-related endpoints are described in the same document. You can't query (about) multiple collections in one call so if you want to do a batch-sweep over multiple collections you'd have to use map (ugh!).

[zacksoft_wf]

want to list their metadata.