Splunk Search

C# search does not return all events

adishilo
Engager

Hi,

I've installed and am using Splunk C# SDK v1.0.
Querying Splunk, I get only part of the events that the same query returns when I place it on the web interface.
I've been using the example presented in the C# search tutorial here on how to query asynchronously using a 'Normal' search job.
The same happened when I tried the OneShot search type.
If it helps, I am aggregating information using 'stats' on the query.

thanks,
Adi

Tags (3)
0 Karma

adishilo
Engager

Turns out this was an authorization problem on the indexer.

Adi

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!