Getting Data In

Getting Splunk API to return more than 30 deployment clients

bsonposh
Communicator

I am using the below URL and it seems to only return 30 clients while the command "splunk.exe list deploy-clients" list over 900.

"https://localhost:8089/servicesNS/nobody/system/admin/deploymentserver/default/default.Clients"

Any thoughts on how I can make this return the full set?

1 Solution

piebob
Splunk Employee
Splunk Employee

the endpoints are set to return only 30 results by default. to get all the results, pass count=-1 as a GET argument.

View solution in original post

piebob
Splunk Employee
Splunk Employee

the endpoints are set to return only 30 results by default. to get all the results, pass count=-1 as a GET argument.

bwooden
Splunk Employee
Splunk Employee

@rroberts, I am unsure if it was available at time of ask, but it is available now: http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTdeploy#GET_deployment.2Fserver

efavreau
Motivator

Checked that link for "-1" and it's not in page today.

###

If this reply helps you, an upvote would be appreciated.
0 Karma

efavreau
Motivator

The literal text of "-1" is not in either link:
- http://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTprolog
- http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Rest

However, the default limit of "30" is mentioned here (find in page "30"):
http://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTprolog

The entry "count" has a description of: "Maximum number of entries to return. Set value to 0 to get all available entries."

However, piebob's answer was the answer for me.

###

If this reply helps you, an upvote would be appreciated.
0 Karma

gjanders
SplunkTrust
SplunkTrust

The search reference REST command is documented here
The REST API reference manual documents the above count parameter over here

0 Karma

rroberts
Splunk Employee
Splunk Employee

Did you find this in the docs?

bsonposh
Communicator

Awesome... thanks!

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...