topic Splunk Rest API response in JSON format in Splunk Enterprise

Splunk Rest API response in JSON format

Eshwar — Fri, 02 Feb 2024 17:48:01 GMT

Hi Community,

We are in the process of sending the alerts from Splunk to another application via REST API but response of the REST API is displaying in XML format as our other application would have expect JSON format however we tried using Postman application as well but the response is same in XML so can any one suggest JSON response REST API to get the alert details?

Regards,

Eshwar

Re: Splunk Rest API response in JSON format

richgalloway — Fri, 02 Feb 2024 18:24:44 GMT

Try specifying output_mode=json. See https://docs.splunk.com/Documentation/Splunk/9.1.3/RESTUM/RESTusing#Encoding_schemes

Re: Splunk Rest API response in JSON format

Eshwar — Sat, 03 Feb 2024 03:55:01 GMT

Hi @richgalloway ,

We had tried giving the output_mode parameter for Rest point but still we can see xml response.

Re: Splunk Rest API response in JSON format

yallami — Fri, 06 Sep 2024 09:39:43 GMT

Hi, did you find a solution?

Re: Splunk Rest API response in JSON format

Stormy — Fri, 01 Nov 2024 16:56:27 GMT

Inorder to get the response in json you want to add ?output_mode=json at the end of your rest api call url.
Or you can add it as part of the payload.