Splunk Enterprise

is there a way to get the data in json format into the KV Store in one go using API endpoint?

super_saiyan
Communicator
is there a way to get the data in json format into the KV Store in one go  using "storage/collections/data/{collection}/" API endpoint?
 
10000 lines of events in one go ?
Labels (3)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

You can set multiple key/value pairs in one call. See the https://docs.splunk.com/Documentation/Splunk/8.2.6/RESTREF/RESTkvstore#storage.2Fcollections.2Fdata....

You're of course limited by the REST API request limits (I'm not sure how big they are).

And I'm not sure why you're refering to KV-store as "events". Events are one thing and you post them to other endpoints (like /services/collector/event), KV Store is another thing.

Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...