How to apply curl to each search result without map command ?

[ssanplunk]

Hi,
I am using curl command in Web Tools Add-on.

How to use "curl" query to make result of below without map command ?

index=test
=> result field is "NUM"
1
2
3

|curl http://1.1.1.1/q?q=1
|curl http://1.1.1.1/q?q=2
|curl http://1.1.1.1/q?q=3

I used macro as below for this case, but it didn't apply.

macro(1): curl http://1.1.1.1/q?q=$NUM$
query: index=test | `macro(NUM)`

result is below:

|curl http://1.1.1.1/q?q=NUM
|curl http://1.1.1.1/q?q=NUM
|curl http://1.1.1.1/q?q=NUM

[jkat54 · Accepted solution]

Please upgrade to the latest version of the app: 1.2.3

https://splunkbase.splunk.com/app/4146/

Then this search should work:

...
| eval data="q=".NUM
| curl uri="http://1.1.1.1/q" datafield=data debug=true

[ssanplunk]

Hi

Thank you for your help!
I will update app and try the SPL.

[ssanplunk]

Hi jkat54,

I completed test at web tools ver1.2.3.
It works good!

Thanks!

[chrisyounger]

Give this a try and let me know if it solves your problem:

|curl http://1.1.1.1/q?q=1
|append [|curl http://1.1.1.1/q?q=2]
|append [|curl http://1.1.1.1/q?q=3]