Security

How do I limit the fields returned by Splunk's REST handlers?

LukeMurphey
Champion

I am attempting to use Splunk's REST handlers. In my case, the REST handler returns lots of fields that I don't need. This causes a lot of data to be transmitted between the browser and Splunk. Is there a way to limit the fields returned?

Tags (1)
0 Karma
1 Solution

LukeMurphey
Champion

Yes, this can be done. Use the "f" parameter to only return the field you care about. Include the parameter for each field you want if you want more than one.

Something like this:

storage/passwords?f=name&f=eai:acl&f=username&f=realm

View solution in original post

LukeMurphey
Champion

Yes, this can be done. Use the "f" parameter to only return the field you care about. Include the parameter for each field you want if you want more than one.

Something like this:

storage/passwords?f=name&f=eai:acl&f=username&f=realm
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...