topic Re: Search results send as HTTP POST automatically in Getting Data In

Search results send as HTTP POST automatically

ryastrebov — Thu, 04 Apr 2013 14:21:54 GMT

Hello!
It is possible to make in search request?

Thank you!

Re: Search results send as HTTP POST automatically

Neeraj_Luthra — Thu, 04 Apr 2013 14:55:16 GMT

Please be more specific. It is the exact same question as you posted yesterday - http://splunk-base.splunk.com/answers/81924/send-search-result-as-http-post.

Re: Search results send as HTTP POST automatically

ryastrebov — Thu, 04 Apr 2013 16:02:34 GMT

These links offer yesterday to create a workflow. If I understand correctly, the workflow can be started manually. Necessary to send the results of the search going on-line, automatically. One approach - writing the script. I thought that there is any way to do this without a script. It is possible?

Re: Search results send as HTTP POST automatically

Damien_Dallimor — Thu, 04 Apr 2013 16:22:36 GMT

Workflow actions will present a link that you can manually click on in the Splunk UI.
For something completely automated I'd consider looking at one of our language SDKs (http://dev.splunk.com/view/sdks/SP-CAAADP7) to develop a custom integration to Splunk. It would be quite simple, your program could just periodically execute a Splunk search and depending on your results criteria , HTTP POST them somewhere.

Re: Search results send as HTTP POST automatically

ryastrebov — Thu, 04 Apr 2013 18:31:18 GMT

Thank you!
And where I can see examples of scripts to send search results as HTTP POST?

Re: Search results send as HTTP POST automatically

Damien_Dallimor — Fri, 05 Apr 2013 05:54:26 GMT

If you browse around the link I already sent , you can find code examples for various different languages for searching in Splunk.
And then depending on the language you are using , there a numerous examples available online for how to perform an HTTP POST, simple python example :

import httplib, urllib
params = urllib.urlencode({
'field1' : 'foo',
'field2' : 'goo'
})
headers = {
"Content-type": "application/x-www-form-urlencoded",
"Accept": "text/plain"
}
conn = httplib.HTTPConnection("somehost.com:80")
conn.request("POST", "/hello/world",params, headers)
conn.close()

Re: Search results send as HTTP POST automatically

ryastrebov — Thu, 11 Apr 2013 18:07:31 GMT

Thank you for your help!