Splunk Search

limited statistics results when running query via API

sushantnarula
Observer

Hi All,

I am running a query and getting limited results in Statistics field (10,000).
Earlier I was using the | sort command in the query, which was limiting the results to 10 K. but after removing it I am getting full results, and now when I am running the same query via API, I am still getting the limited 10 k results in statistics.

is this is a default configuration in splunk. Can I get full results running the query via API.

Thanks,
Sushant

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...