https://community.splunk.com/t5/Splunk-Dev/Is-it-possible-to-create-retrieve-modify-and-delete-eventtypes/m-p/207262#M2761 <P>Can we create/retrieve/update/delete eventtypes, tags from javascript SDK ? <BR /> If yes how do we it? </P> Fri, 23 Sep 2016 13:49:40 GMT sashankdvk 2016-09-23T13:49:40Z https://community.splunk.com/t5/Splunk-Dev/Is-it-possible-to-create-retrieve-modify-and-delete-eventtypes/m-p/207262#M2761 <P>Can we create/retrieve/update/delete eventtypes, tags from javascript SDK ? <BR /> If yes how do we it? </P> Fri, 23 Sep 2016 13:49:40 GMT https://community.splunk.com/t5/Splunk-Dev/Is-it-possible-to-create-retrieve-modify-and-delete-eventtypes/m-p/207262#M2761 sashankdvk 2016-09-23T13:49:40Z https://community.splunk.com/t5/Splunk-Dev/Is-it-possible-to-create-retrieve-modify-and-delete-eventtypes/m-p/207263#M2762 <P>Yes and no. Eventtypes and tags can be trivially made using the REST API - SDK not required. All you need is something that can make HTTP calls, like the JQuery $.ajax() function, or whatever you would use in NodeJS. The SDK exposes parts of the entities available via the REST API as subclasses of splunkjs.Service - like splunkjs.Service.SavedSearches. There is no pre-built splunkjs.Service.EventTypes, so you'd have to extend the SDK some.</P> <P>But if you look here, you can see the underlying REST API for making a new EventType: <A href="http://docs.splunk.com/Documentation/Splunk/6.4.3/RESTREF/RESTknowledge#saved.2Feventtypes">http://docs.splunk.com/Documentation/Splunk/6.4.3/RESTREF/RESTknowledge#saved.2Feventtypes</A> Here is an example of using that endpoint, via curl on the command line, to make a new eventtype and tag it.</P> <PRE><CODE>curl -k -u admin:changeme 'https://localhost:8089/servicesNS/admin/search/saved/eventtypes?output_mode=json' -X POST -d 'name=example' -d 'search=index=abc sourcetype=foo' -d 'tags=potato,tomato,crap' </CODE></PRE> <P>Again anything that can create an HTTP request with post data can do this. The SDK's wrappings make it somewhat easier, but you don't strictly need it.</P> Sat, 24 Sep 2016 15:54:20 GMT https://community.splunk.com/t5/Splunk-Dev/Is-it-possible-to-create-retrieve-modify-and-delete-eventtypes/m-p/207263#M2762 dwaddle 2016-09-24T15:54:20Z https://community.splunk.com/t5/Splunk-Dev/Is-it-possible-to-create-retrieve-modify-and-delete-eventtypes/m-p/207264#M2763 <P>thanks for the answer it is helpful. We are trying to make this similar call from JS , can you tell us how to authenticate to splunk server using JS than in curl ? will the splunk service give us some authentication token ? </P> Tue, 27 Sep 2016 11:59:28 GMT https://community.splunk.com/t5/Splunk-Dev/Is-it-possible-to-create-retrieve-modify-and-delete-eventtypes/m-p/207264#M2763 sashankdvk 2016-09-27T11:59:28Z https://community.splunk.com/t5/Splunk-Dev/Is-it-possible-to-create-retrieve-modify-and-delete-eventtypes/m-p/207265#M2764 <P>@sashankdvk were you able to solve this problem? I am trying to do exactly same. I would really appreciate if you can share how you solve this.</P> Mon, 19 Jun 2017 18:40:25 GMT https://community.splunk.com/t5/Splunk-Dev/Is-it-possible-to-create-retrieve-modify-and-delete-eventtypes/m-p/207265#M2764 nimeshkakadiya 2017-06-19T18:40:25Z