Streaming results with REST API? - Splunk Community

Getting Data In

Is it possible to stream results with the REST API? Every search i submit has the 'resultIsStreaming' value set to 0.

For Realtime searches you need to pass search_mode. You can collect the events as you go or you can collect them all at the end.

See: http://answers.splunk.com/questions/9231/streaming-realtime-results-via-the-rest-api/10397#10397

Get Updates on the Splunk Community!

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner Join us for a demo-driven look at how ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Ditch the Manual Grind: Building AI Agents with Splunk

Ditch the Manual Grind: Building AI Agents with Splunk Let’s be real: your team’s time is being eaten alive. ...