I am connecting to splunk REST API from POSTMAN to view the results, In SPLUNK I am able to see 1 log for the provided timeperiod, where as in POSTMAN I am able to see 4 logs.(Duplicate logs) for the same timeperiod.
NOTE: This is happening only for JSON Format, if I change the format to CSV, everything seems to be fine. Is there a way to avoid duplicates?
In the REST API CALL do I need to modify anything?
The REST API CALL which I am using is as below,