Please find the sample event field comment   comment="This is  sample data  "to remove the double quote value" how to remove it?It is for a  "testing purpose" which we need to handle " I have tried rex field=_raw  mode=sed "s/\"//g"    But after that when we apply   table  command  |table comment , giving me partial data  "This is  sample data "  Appreciate your help Deev ... View more

Hi,  We are using  the Curl script to call splunk RestAPI to send the data out of  splunk  (to Kafka/ES) . We have 1+lakhs  events in every second . So while calling the rest api (calling every 5 secs) , it is getting time out . Sample  curl command for calling restapi    curl -k -u admin:changeme \ https://localhost:8089/services/search/jobs/ -d search="search index=sample sourcetype=access_* earliest=-5m" What is the limit of event count  we can extract at a time through Rest API Call? What is the  default timeout settings  ?Is it possible to change ?  Is there a better way to send splunk data  outside?  Tried Python script using Splunklib.client .That also failed .   Appreciate your inputs in advance . Regards Deev   ... View more