All Apps and Add-ons

Indexing results from JKats Toolkit cURL

mrgibbon
Contributor

Hi All, Im just about to get cracking on a new project and want to know something before I start.
I'll be taking a look at the curl command in JKats Toolkit to retrieve data from an external system.
BUT, I don't want to view the data on a dashboard, I'd like to have it indexed instead.
Is it possible? If it is, how?

Thanks in advance!

0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

Yes that's exactly how I would do it. Collect, sistats, etc.

The premise of the command is to get the data into the search pipeline so that you can use Rex and other commands to manipulate it as you wish. There are updates coming and your input is welcomed and appreciated.

View solution in original post

jkat54
SplunkTrust
SplunkTrust

Yes that's exactly how I would do it. Collect, sistats, etc.

The premise of the command is to get the data into the search pipeline so that you can use Rex and other commands to manipulate it as you wish. There are updates coming and your input is welcomed and appreciated.

mrgibbon
Contributor

Thanks for the confirmation, I'd be eager to see any future updates!

0 Karma

jkat54
SplunkTrust
SplunkTrust

Next version should only use options instead of the current mix of keywords and options. So it will look like this

| curl uri=... method=... user=... pass=... data=...

after that the next goal is to encrypt the authentication settings in a conf file and give the option of connection_name=... Maybe include the uri in the conf file too (optionally).

0 Karma

jkat54
SplunkTrust
SplunkTrust

Thanks for your interest!

0 Karma

mrgibbon
Contributor

Could I use the collect command for instance? Or is there a better way? I dont want to use a summary index unless I really need to.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...