<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk API output in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-API-output/m-p/474216#M81422</link>
    <description>&lt;P&gt;When I try the api endpoint curl -k -u username:passwd &lt;A href="https://localhost:8089/servicesNS/admin/search/search/jobs/export" target="_blank"&gt;https://localhost:8089/servicesNS/admin/search/search/jobs/export&lt;/A&gt; -d search='search sourcetype=bcoat_proxy, cs_username="username", cs_host="yahoo.com"' -d output_mode=json&lt;BR /&gt;
I am able to get output for the above with the specific username but when I try the same endpoint and data with python requests (POST) or pycurl(POST) I am not getting cs_username in the output but everything else is available. &lt;/P&gt;

&lt;P&gt;Has someone gone through a similar issue?&lt;/P&gt;

&lt;P&gt;Thanks in advance!&lt;/P&gt;</description>
    <pubDate>Wed, 30 Sep 2020 03:30:40 GMT</pubDate>
    <dc:creator>sreekaanth_91</dc:creator>
    <dc:date>2020-09-30T03:30:40Z</dc:date>
    <item>
      <title>Splunk API output</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-API-output/m-p/474216#M81422</link>
      <description>&lt;P&gt;When I try the api endpoint curl -k -u username:passwd &lt;A href="https://localhost:8089/servicesNS/admin/search/search/jobs/export" target="_blank"&gt;https://localhost:8089/servicesNS/admin/search/search/jobs/export&lt;/A&gt; -d search='search sourcetype=bcoat_proxy, cs_username="username", cs_host="yahoo.com"' -d output_mode=json&lt;BR /&gt;
I am able to get output for the above with the specific username but when I try the same endpoint and data with python requests (POST) or pycurl(POST) I am not getting cs_username in the output but everything else is available. &lt;/P&gt;

&lt;P&gt;Has someone gone through a similar issue?&lt;/P&gt;

&lt;P&gt;Thanks in advance!&lt;/P&gt;</description>
      <pubDate>Wed, 30 Sep 2020 03:30:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Splunk-API-output/m-p/474216#M81422</guid>
      <dc:creator>sreekaanth_91</dc:creator>
      <dc:date>2020-09-30T03:30:40Z</dc:date>
    </item>
  </channel>
</rss>

