Splunk Dev
×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question

Is running a real time search using the sdk supposed to return duplicate results?

f2mahmud
Engager
‎04-02-2018 08:30 AM

If so, is there a proper way to get around that? Possibly get data as they come in?

For Instance:

If I run a real-time-search for a minute on the Splunk server(localhost) while running the same search using the SDK, I seem to get 30 results in the server while there is almost an infinite number of results being printed in the SDK.

I do not know if it might help my case, but I am using the eventgen app to regulate event generation.

0 Karma
Reply
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...