How to retrieve distinct field values from KV Stor...

Knowledge Management

Hi,

I have a collection in the KV Store that contains several 10,000's of documents. Each document has a specific field that is present in each of them - sometimes values are the same, sometimes different. I need to retrieve a list of all possible values by REST API.

Talking in SPL I would like to have this result:

|inputlookup mylookup |stats values(myfield)

(And I don't want to use the search endpoints a query a search job by REST API that does the SPL above : ) )

Does anyone know if this is possible and how to do it?

RngFox

Get Updates on the Splunk Community!

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

AI is one of the biggest topics in the market today, and for security teams, its value goes far beyond the ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

[REGISTER HERE] This thread is for the Community Office Hours session on Detection Engineering Office Hours: ...