- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
REST API Monitoring
We want to monitor and poll data from REST APIs and index the responses in Splunk.
We know that could be achieved by the Splunk base provided app REST API Modular Input but since it's a developer supported paid service application, we wanted to know is there any other alternative way to monitor the same in Splunk enterprise.
A quick response is highly appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

You can write your own scripted or modular input calling the REST API and returning the downloaded results. Or write a script calling the API by curl or similar way and write results to a file. Then you'd ingest the file contents.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for the response
any reference link to achieve the same would be helpful.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/custominputs/modinputsoverview/
https://docs.splunk.com/Documentation/Splunk/latest/Data/Getdatafromscriptedinputs
Writing a custom script would be of course up to you. Monitoring an intermediate file is just normal file ingestion so nothing extraordinary.
