Splunk Enterprise Security

How to View all Suppression Details in Endpoint

Vignesh
Explorer

Hi Guys,

Need a help

i am trying to check my suppression list in rest endpoint i have almost 100+ suppression showing in the notable suppression.

but i see only very few 20-30 suppression in the endpoint
https://splunk:8089/servicesNS/nobody/SA-ThreatIntelligence/alerts/suppressions


is there a way to see all 100+ suppression in the endpoint

Tags (1)
0 Karma
1 Solution

livehybrid
SplunkTrust
SplunkTrust

Hey,

In your request to the suppression endpoint add ?count=-1 or ?count=0 to the end and I believe this should remove the limit on the number of results returned.
Good luck!

Will

View solution in original post

Vignesh
Explorer

Thank you it worked with count=0

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hey,

In your request to the suppression endpoint add ?count=-1 or ?count=0 to the end and I believe this should remove the limit on the number of results returned.
Good luck!

Will

First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...