topic Re: Rest API Access in Splunk Dev

How to access Rest API via C# application?

robertpurpose — Wed, 23 Mar 2022 16:26:09 GMT

I have a local access to Splunk on my system and I am seeking out means of accessing the API via a C# application. I noticed there was some documentation but no clear direction on data definition or additional routes to accessing the data. Could I get some help with this?

Re: Rest API Access

SanjayReddy — Wed, 23 Mar 2022 16:06:32 GMT

Hi @robertpurpose

have you already gone through the follwing documentation

https://github.com/splunk/splunk-sdk-csharp

https://dev.splunk.com/enterprise/docs/devtools/csharp/sdk-csharp/

FYI

for accessing REST API In SDK

please use either https://localhost:8089 OR http://localhost:8089

Re: Rest API Access

robertpurpose — Wed, 23 Mar 2022 16:14:52 GMT

I am just seeing this documentation and will start reading and testing. Thank you @SanjayReddy

Re: How to access Rest API via C# application?

robertpurpose — Wed, 23 Mar 2022 21:12:17 GMT

I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6 and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Is there an easier means of accessing Enterprise via username, password, and data I would like to download? I think the closest I came to this is here: https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTUM/RESTusing#Encrypt_REST_API_requests

Any help is appreciated and thank you so much so far for your patience.

Re: Rest API Access

robertpurpose — Wed, 23 Mar 2022 21:54:14 GMT

@SanjayReddy I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6 and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Any help is appreciated and thank you so much so far for your patience.