topic Re: Is there a way to get inputs.conf on the deployment server via the rest API? in Getting Data In

Is there a way to get inputs.conf on the deployment server via the rest API?

ddrillic — Thu, 02 May 2019 22:06:49 GMT

We can reach via

https://<deployment server>:8089/services/deployment/server/applications/<app name>

to the deployment app level. However, we would like to reach the inputs.conf which is under the local directory and we can't find it. Is it possible, by any chance?

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

pruthvikrishnap — Thu, 02 May 2019 22:39:11 GMT

not sure if this helps, https://docs.splunk.com/Documentation/Splunk/7.2.6/RESTREF/RESTinput

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

dstaulcu — Thu, 02 May 2019 23:04:09 GMT

ive worked with windows garbage (propriety data stores for config files) most of my career and can finally use github and jenkins to great effect for my splunk configs. have you thought of automating at that level of abstraction?

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

koshyk — Fri, 03 May 2019 13:49:55 GMT

Please have a try using

| rest splunk_server=<yourdeploymentserver> /servicesNS/admin/<your_app>/configs/conf-inputs

If you are doing within the deployment-server, you can do splunk_server=local

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

gcusello — Mon, 06 May 2019 07:56:20 GMT

Hi ddrillic,
to monitor my Deployment Server I created a report that uses a rest command and save output in a file read by an input and sent to Indexers.

At the same time, I read all the .conf files in Deployment Server and I show them in an App on Search Head.
This is useful for me when i have new inputs and I want to be sure that the input is not existing.

If you want I can share my report and inputs.conf tomorrow.

Bye.

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

ddrillic — Mon, 06 May 2019 18:30:14 GMT

No luck with that @koshyk. I get 0 results for it...

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

koshyk — Mon, 06 May 2019 18:33:04 GMT

hi mate, you sure you are on deployment-server (or the main server attached to deployment-server)?
In our case, we cannot do it from search heads, but only on the deployment server UI

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

ddrillic — Mon, 06 May 2019 18:38:16 GMT

Right, I'm on the deployment-server.

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

koshyk — Mon, 06 May 2019 18:47:13 GMT

Can you please try for an APP, which is part of default setting? Like "search" app or a generic app. just to ensure it is not permission related. ANY server should show it

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

ddrillic — Mon, 06 May 2019 18:48:27 GMT

If you can @gcusello, it would be great.

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

ddrillic — Wed, 08 May 2019 14:51:18 GMT

@koshyk, sorry, trying a different route.

This one worked for sanity connection check -

curl -k -u user:passwrd https://<deployment server>:8089/services

Against the app -

$ curl -k -u user:passwrd https://<deployment server>:8089/servicesNS/admin/<deployment app>/configs/conf-inputs

<?xml version="1.0" encoding="UTF-8"?>
<response>
  <messages>
    <msg type="ERROR">Application does not exist: <deployment app></msg>
  </messages>
</response>

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

koshyk — Wed, 08 May 2019 15:05:56 GMT

@drillic, you shouldn't put <deployment app>. I've provided as a placeholder example. You need to put the actual name of your app

for eg. search app
| rest /servicesNS/admin/search/configs/conf-inputs

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

ddrillic — Wed, 08 May 2019 15:15:36 GMT

I did so @koshyk

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

ddrillic — Wed, 08 May 2019 18:21:10 GMT

I had a nice call with our SE, who concluded that the conventional rest calls don't cover the deployment server apps as they are not memory resident.

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

ddrillic — Mon, 20 May 2019 15:27:11 GMT

For the record, our SE said -

-- .. Just that the deployment server's interactions with the API is unique, as the API (as far as I could tell) is looking at the active configuration files (/apps), not the deployment configs.

I don't believe we have an existing endpoint to do what you want,...

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

Naa_Win — Fri, 19 Jul 2024 16:06:01 GMT

Hello @gcusello

Can you please share the same ? I have a similar use case.

Re: Is there a way to get inputs.conf on the deployment server via the rest API?

gcusello — Sat, 20 Jul 2024 08:38:14 GMT

Hi @Naa_Win ,

try this, even if I did it more than five years ago, but it should still run!

| rest splunk_server=local /services/deployment/server/clients\ | table hostname ip utsname *.restartSplunkd\

Ciao.

Giuseppe