Security

How do I limit the fields returned by Splunk's REST handlers?

LukeMurphey
Champion

I am attempting to use Splunk's REST handlers. In my case, the REST handler returns lots of fields that I don't need. This causes a lot of data to be transmitted between the browser and Splunk. Is there a way to limit the fields returned?

Tags (1)
0 Karma
1 Solution

LukeMurphey
Champion

Yes, this can be done. Use the "f" parameter to only return the field you care about. Include the parameter for each field you want if you want more than one.

Something like this:

storage/passwords?f=name&f=eai:acl&f=username&f=realm

View solution in original post

LukeMurphey
Champion

Yes, this can be done. Use the "f" parameter to only return the field you care about. Include the parameter for each field you want if you want more than one.

Something like this:

storage/passwords?f=name&f=eai:acl&f=username&f=realm
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...