Getting Data In

Streaming results with REST API?

nnachefski
Engager

Is it possible to stream results with the REST API? Every search i submit has the 'resultIsStreaming' value set to 0.

Tags (2)

bsonposh
Communicator

For Realtime searches you need to pass search_mode. You can collect the events as you go or you can collect them all at the end.

See: http://answers.splunk.com/questions/9231/streaming-realtime-results-via-the-rest-api/10397#10397

Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...