topic Re: Connect to Python API through base url and .splunkrc in Splunk Dev

Connect to Python API through base url and .splunkrc

splunkreal — Fri, 26 Jan 2024 13:03:44 GMT

We are using /api base url, is that correct for .splunkrc as it asks for host and in our environment we use url?

thanks for your help!

.splunkrc # Splunk host (default: localhost) host=splunkurl/api # Splunk admin port (default: 8089) port=443 # Splunk username username= # Splunk password password= # Access scheme (default: https) scheme=https # Your version of Splunk (default: 6.3) version=9.0.4

Re: Connect to Python API through base url and .splunkrc

VatsalJagani — Mon, 22 Jan 2024 13:51:13 GMT

@splunkreal - For the host you need to just IP address or hostname. The port should be a Splunk management port generally 8089 and not the Splunk UI port.

I hope this helps!!!

Re: Connect to Python API through base url and .splunkrc

splunkreal — Mon, 22 Jan 2024 14:01:11 GMT

Hello, thanks so how would you connect from Python using base url? We have HA/FO servers in front of Splunk servers.

Re: Connect to Python API through base url and .splunkrc

VatsalJagani — Mon, 22 Jan 2024 17:02:42 GMT

HA/FO shouldn't affect the URL for API for Splunk.

Base URL should be constructed as https://<host/ip>:8089

Re: Connect to Python API through base url and .splunkrc

VatsalJagani — Fri, 26 Jan 2024 12:29:28 GMT

@splunkreal - Did you got to resolve your issue?

Re: Connect to Python API through base url and .splunkrc

PickleRick — Fri, 26 Jan 2024 12:47:20 GMT

Theoretically, of course a reverse-proxy could affect a URI path of the request redirecting it into somewhere else on the backend but that would need to be explicitly configured.

Anyway see the https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing document and see the remark about namespaces on https://docs.splunk.com/Documentation/Splunk/9.1.3/RESTREF/RESTlist

Re: Connect to Python API through base url and .splunkrc

splunkreal — Fri, 26 Jan 2024 13:19:02 GMT

Hi @VatsalJagani no, we need to use base url api. Thanks.

Re: Connect to Python API through base url and .splunkrc

splunkreal — Fri, 26 Jan 2024 13:19:50 GMT

Hi @PickleRick we use base url api already for curl commands and would like to use in python.

Re: Connect to Python API through base url and .splunkrc

PickleRick — Fri, 26 Jan 2024 13:30:06 GMT

Just set host and port and let the splunklib handle the rest.