topic Re: Feed data to the splunk index using REST API in Getting Data In

Feed data to the splunk index using REST API

priyankatiwari — Wed, 11 Apr 2018 14:58:25 GMT

Hello experts! I would like to configure my java application to write data directly to a splunk index, rather than write to application logs and then use the splunk agent to index/search the logs, for data visualization. The documentation describes modular inputs as one way to feed data into splunk without the use of application logs. But, is there a way I can directly write to splunk, through the application , without the use of logging? . Would appreciate any inputs!

Thanks much!
Splunk newbie

Re: Feed data to the splunk index using REST API

damien_chillet — Wed, 11 Apr 2018 15:17:58 GMT

You could add data directly to an index using the Java SDK for example.

See "To add data directly to an index" at http://dev.splunk.com/view/java-sdk/SP-CAAAEJ2
One of the available method lets you send events over a writeable socket for example.

Re: Feed data to the splunk index using REST API

priyankatiwari — Wed, 11 Apr 2018 18:12:42 GMT

Thank you for the response @damien_chillet . The SDK api looks like a promising option. Exploring to see if we can use it!