https://community.splunk.com/t5/Getting-Data-In/Forward-to-third-party-API-via-POST/m-p/425721#M74607 <P>The target API expects entries to come via a specific URL endpoint and works with json files.<BR /> I managed to create an entry in the system with curl but I need Splunk to index and then forward entries in json format.</P> <PRE><CODE>curl -X POST -H "Accept: application/json" -u "username:password" <A href="https://ENDPOINT_HOST:8081/loggingservice/security-events" target="test_blank">https://ENDPOINT_HOST:8081/loggingservice/security-events</A> -d @entry.json </CODE></PRE> Fri, 14 Jun 2019 07:32:31 GMT vstariradev 2019-06-14T07:32:31Z https://community.splunk.com/t5/Getting-Data-In/Forward-to-third-party-API-via-POST/m-p/425721#M74607 <P>The target API expects entries to come via a specific URL endpoint and works with json files.<BR /> I managed to create an entry in the system with curl but I need Splunk to index and then forward entries in json format.</P> <PRE><CODE>curl -X POST -H "Accept: application/json" -u "username:password" <A href="https://ENDPOINT_HOST:8081/loggingservice/security-events" target="test_blank">https://ENDPOINT_HOST:8081/loggingservice/security-events</A> -d @entry.json </CODE></PRE> Fri, 14 Jun 2019 07:32:31 GMT https://community.splunk.com/t5/Getting-Data-In/Forward-to-third-party-API-via-POST/m-p/425721#M74607 vstariradev 2019-06-14T07:32:31Z https://community.splunk.com/t5/Getting-Data-In/Forward-to-third-party-API-via-POST/m-p/425722#M74608 <P>I am looking for the same solution. May be a custom command using Python script will help.</P> Sat, 15 Feb 2020 23:07:01 GMT https://community.splunk.com/t5/Getting-Data-In/Forward-to-third-party-API-via-POST/m-p/425722#M74608 jawaharas 2020-02-15T23:07:01Z