topic Re: Can REST API be used to execute a Bash script on Splunk server? in Getting Data In

Can REST API be used to execute a Bash script on Splunk server?

jingqin — Tue, 03 Apr 2018 15:10:09 GMT

I have a Bash script on my deployment server to add server into the serverclass.conf. Could I execute the bash script from a client using the Splunk REST API?

Re: Can REST API be used to execute a Bash script on Splunk server?

damien_chillet — Tue, 03 Apr 2018 15:51:02 GMT

You could execute a bash script using the Splunk REST API.

You would have to develop a custom search command "runscript" which would run the script and use the API to run a search ("| runscript").

Link to Splunk Dev on how to create custom search commands: http://dev.splunk.com/view/python-sdk/SP-CAAAEU2
A good recent app example that use custom search command to run btool: https://splunkbase.splunk.com/app/3923/

Re: Can REST API be used to execute a Bash script on Splunk server?

jingqin — Tue, 03 Apr 2018 15:54:49 GMT

Emm.....but I would like to execute it from another server instead of search query. How can i achieve it?

Re: Can REST API be used to execute a Bash script on Splunk server?

damien_chillet — Tue, 03 Apr 2018 16:05:23 GMT

Well, if you define the command on the deployment server you can simply run something like the following from the client:

curl -d search="| runscript" https://deployment.server:8089/services/search/jobs -u admin:change

Re: Can REST API be used to execute a Bash script on Splunk server?

jingqin — Mon, 09 Apr 2018 15:11:11 GMT

is that work for bash script? I only see python script in the document...