topic Re: How to search Splunk from external web application? in Splunk Search

How to search Splunk from external web application?

stwong — Wed, 22 May 2019 03:53:20 GMT

Hi, we've a simple web application in PHP that queries user's status from different sources (e.g. LDAP, Oracle DB, etc.). Possible to search Splunk by passing arguments like username, time selector, etc. to a predefined report, and gives result in html ?

Sorry for the newbie question. Thanks.

/stwong

Re: How to search Splunk from external web application?

niketn — Wed, 22 May 2019 04:29:28 GMT

@stwong there are several options:

1) Embedded Scheduled reports : https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Embedscheduledreports

2) Splunk component in your web page using SplunkJS: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEWR

3) Splunk Developer Cloud (beta introduced at .conf 2018): https://www.splunk.com/blog/2018/10/03/new-for-developers-splunk-developer-cloud-more.html

Re: How to search Splunk from external web application?

stwong — Wed, 22 May 2019 06:32:55 GMT

Seems 2) suits our need while 1) doesn't accept parameter passing from the external web to the report.

Thanks for your help.

Re: How to search Splunk from external web application?

stwong — Wed, 22 May 2019 06:38:54 GMT

seems need to put plaintext Splunk username/password in SplunkJS configurations.