Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

REST API: saved search - eventCount okay, but eventAvailableCount and resultCount much less

$
0
0

We had a script that used the REST API to parse results from a saved search and it was running fine. About a month ago it started returning less results than previously.

Via the UI the event count is 23,300.

Via the REST API the eventCount field is 23300, but... eventAvailableCount is 3836 and resultCount is 1742.

How can we debug why the resultCount is not the same as eventCount?


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>