Closed jshlbrd closed 5 years ago
I made a new branch called searchlimit which adds the limit
parameter to ElasticDF
and SplunkDF
methods search()
and search_df()
. Consider it an alpha release right now: I changed search types for both classes under the hood to make this work and they both still need more testing.
Still, my initial test cases work OK, and limits really speed up the searches, too.
You can install this in a new virtualenv with a command like:
pip install https://github.com/target/huntlib/archive/searchlimit.zip
Please drop any feedback in this issue.
I merged this into master and made a new release, v0.3.0.
Is your feature request related to a problem? Please describe. When testing new searches the user may be interested in immediate feedback on the search results and not interested in receiving all results -- this can make testing take longer than it otherwise would need to be, especially for searches that may return thousands of results.
Describe the solution you'd like An option to only return the first N results of a search (similar to the Unix "head" command). Ideally this is written in a way that interrupts the search after N is reached, which would speed up the time to get results.
Describe alternatives you've considered N/A
Additional context N/A