Getting Data In

Problem finding knowledge objects

raugugliaro
New Member

Has anyone had a problem using this REST endpoint?

/services/directory

This is supposed to return a list of all knowledge objects by owner and app, but for some reason, only returns a partial list. I have not been able to figure out a common pattern as to which objects are returned and which are not.

Tags (2)
0 Karma

valiquet
Contributor

|REST /servicesNS/-/-/directory

This should list for all apps(-) and all users(-)

0 Karma

raugugliaro
New Member

Sorry, I forgot to mention that I am running the rest call inside of a Splunk search which defaults to "count=0" so that isn't the problem. I'm sure that its returning more than 30 items per call.

0 Karma

harsmarvania57
Ultra Champion

Hi @raugugliaro,

By default /services/directory REST endpoint will display first 30 knowledge objects only, if you want to load all knowledge objects then you need to use /services/directory?count=0

I hope this helps.

Thanks,
Harshil

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...