Knowledge Management

How to get kvstore values with the command rest?

pbalbasm
Path Finder

Hi all,

I'm currently retrieving lookups from another SH in this way:

| rest splunk_server=server_name splunk_server_group=* /services/search/jobs/export
 search=" | inputlookup my_lookup.csv" output_mode=csv

This produces 2 columns, splunk_server and value

The problem I'm facing is when I'm trying to do the same with a kvstore I'm not getting anything in the field value. Is it any way to retrieve the kvstore information in the same way?

Thanks in advance.

0 Karma

starcher
Influencer
0 Karma

pbalbasm
Path Finder

Hi, thanks for the info! Could you provide a query in Splunk for this? Thanks in advance.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...