Good Morning,
I am working with:
Splunk Version
7.0.3
Splunk Build
fa31da744b51
I have built my search and when I run it in the dashboard, I see all 360 results that I am expecting; however, when I execute my saved search via the Python SDK I only get 100 results back. I believe it is related to pagination, but cannot figure out the correct parameters to solve the problem. Here is what I am running:
import splunklib.client as client
service = client.connect(
host=HOST,
port=PORT,
username=USERNAME,
password=PASSWORD)
...
mysavedsearch = service.saved_searches[splunk_report]
# Run the saved search
job = mysavedsearch.dispatch()
for result in results.ResultsReader(job.results()):
. .........process the response.
I see reference to count in other posts but mostly when executing a search not a saved_search. Any advice on what parameter to use would be appreciated.
Thanks.
... View more