Getting Data In

API limits to 100 results

sondradotcom
Path Finder

I'm using the API via the php sdk. Things are going well except for one thing -- I can never get more than 100 results. When I'm running a timechart query, for example, for a period of a week and a span of 1 hour, I should get 168 results but it stops at 100. Any thoughts?

Thanks! -S.

Tags (1)

vikiitd
New Member

hi i am facing the same issue with java sdk but don't see a count argument supported for the getResults() function. It only takes a map as a argument. Any idea on how to handle this issue in java sdk. Help much appreciated!

Thanks!

0 Karma

lpolo
Motivator
0 Karma

lpolo
Motivator

I am facing the same issue...

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

To retrieve more than 100 results, you can set the limit higher in the API request using the count argument. For the PHP SDK, you can pass in the count parameter to the getResults() function. To page through the result set, you can use both the offset and count GET arguments to the API.

To make sure that these are being properly passed by the SDK, you should watch what's written to splunkd_access.log and verify that the GET arguments are in the requested URLs.

Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...