get_kvstore_data
Retrieve documents from a Splunk KV Store collection with optional MongoDB-style query filtering to fetch lookup or configuration data.
Instructions
Get documents from a KV Store collection with optional MongoDB-style query filtering. Use this to fetch lookup/configuration data or narrow results by field values.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| collection | Yes | Collection name | |
| app | No | App where the collection resides (defaults to current/app context) | |
| query | No | MongoDB-style filter object (e.g., {"status": "active"}) |