Getting Data In

Splunk python API returning limited data

bekeran
New Member
I am currently using a python API call to retrieve data from Splunk. I am getting approximately 1 day of data when the argument passed is for 30 days or more or lower of the data shown in the Splunk console. Can someone help?
Tags (1)
0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @bekeran 

Hope you must be using search/jobs API to query the splunk and get the results. Default is 10K , if you want to retrieve more than that set max_count to desired value. 30 days is huge for API to process depends of number of events you have in Splunk.

--

An upvote would be appreciated and Accept solution if this reply helps!

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...