|
Is it possible to stream results with the REST API? Every search i submit has the 'resultIsStreaming' value set to 0. |
|
For Realtime searches you need to pass search_mode. You can collect the events as you go or you can collect them all at the end. See: http://answers.splunk.com/questions/9231/streaming-realtime-results-via-the-rest-api/10397#10397 |