topic Re: How to make a custom REST endpoint in Splunk? in Splunk Enterprise

How to make a custom REST endpoint in Splunk?

LukeMurphey — Tue, 05 Mar 2019 17:39:41 GMT

How do I make a custom REST endpoint in Splunk?
I am struggling to find documentation that explains how to make one.

Re: How to make a custom REST endpoint in Splunk?

LukeMurphey — Tue, 05 Mar 2019 17:40:29 GMT

See https://github.com/jrervin/splunk-rest-examples for examples of how to make a REST endpoint in Splunk.

There are also some helper libraries that you can use.

Here is a library for helping to create a REST handler for providing access to a custom .conf file: https://github.com/LukeMurphey/splunk-network-tools/blob/master/src/bin/network_tools_app/simple_rest_handler.py

Here is a helper library for a generic REST endpoint: https://gist.github.com/LukeMurphey/238004c8976804a8e79570d22721fd99

Re: How to make a custom REST endpoint in Splunk?

bnorthway_splun — Wed, 11 Sep 2019 19:36:22 GMT

could we get an example for exposing a POST endpoint to Splunk Web?

Re: How to make a custom REST endpoint in Splunk?

thellmann — Tue, 11 Feb 2020 20:15:28 GMT

We've just released updated documentation on custom REST endpoints: https://dev.splunk.com/enterprise/docs/developapps/customrestendpoints/

Please let us know if this helps answer your question. We'd also love to hear about feedback or suggestions for improvement.

Re: How to make a custom REST endpoint in Splunk?

datphamtat — Tue, 29 Mar 2022 09:03:55 GMT

But don't have an example for the POST endpoint. Overall, I think the document in Splunk is not good, not enough for a newbie. IBM QRadar and ELK have good document to development