Hello, You can use the "$or" or "$and" operator in your json query, here is an example that worked for me: query = json.dumps({"$or":[{"id": "X354" },{"id":"Y762"}]}) data = collection.data.query(query =query) Ressources : https://docs.splunk.com/Documentation/Splunk/8.0.4/RESTREF/RESTkvstore
... View more