How SPLUNK can index external application's REST API which is having token based Authentication

aritratony — Tue, 20 Aug 2019 13:11:01 GMT

Hi All,

We are able to successfully index REST API in SPLUNK by both ADD ON Builder and Rest Modular Input(REST_TA).
But these REST APIs are having basic authentication.

We are looking for indexing the REST API which are having token based authentication.

Can anyone of you provide any suggestion regarding this how we can achieve this in SPLUNK(ADD on Builder & REST_TA)

Re: How SPLUNK can index external application's REST API which is having token based Authentication

richgalloway — Tue, 20 Aug 2019 13:58:27 GMT

If you're using the add-on builder then you have custom code in a modular input. Modify that code to perform token authentication per the API's documentation.

topic How SPLUNK can index external application's REST API which is having token based Authentication in Getting Data In

How SPLUNK can index external application's REST API which is having token based Authentication

Re: How SPLUNK can index external application's REST API which is having token based Authentication