Splunk REST APIs

akshada_s — Fri, 22 Sep 2023 05:32:31 GMT

Hi Team

I am new to Splunk and looking for a way to Fetch few metrics data from Splunk using Splunk REST API.
Can you please help me with right approach to implement the same?

I have explored 2 ways so far:
1. Using Search Job endpoints (Trying out this way is in-progress)
2. Using search queries within scripts

If you can help with pro's n cons of above methods, also if any other way which will be appropriate one, it would be helpful.
I am looking for best way to develop these APIs, so can get the result stored into files\database.

Any inputs would be really appreciated.

Thanks in advance!
Akshada

Re: Splunk REST APIs

VatsalJagani — Sat, 23 Sep 2023 14:16:02 GMT

@akshada_s - If you are trying to run Splunk search from outside the script then jobs endpoint is usually the answer.

Find more info here - https://docs.splunk.com/Documentation/Splunk/9.1.1/RESTTUT/RESTsearches

I hope this helps!!!

topic Splunk REST APIs in Knowledge Management

Splunk REST APIs

Re: Splunk REST APIs