All Apps and Add-ons

REST API Monitoring

rukshar
Explorer

We want to monitor and poll data from REST APIs and index the responses in Splunk.

We know that could be achieved by the Splunk base provided app REST API Modular Input but since it's a developer supported paid service application, we wanted to know is there any other alternative way to monitor the same in Splunk enterprise.

A quick response is highly appreciated. 

Labels (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

You can write your own scripted or modular input calling the REST API and returning the downloaded results. Or write a script calling the API by curl or similar way and write results to a file. Then you'd ingest the file contents.

0 Karma

rukshar
Explorer

Thanks for the response
any reference link to achieve the same would be helpful.

0 Karma

PickleRick
SplunkTrust
SplunkTrust

https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/custominputs/modinputsoverview/

https://docs.splunk.com/Documentation/Splunk/latest/Data/Getdatafromscriptedinputs

Writing a custom script would be of course up to you. Monitoring an intermediate file is just normal file ingestion so nothing extraordinary.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Manage Edge Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline ...

Splunk Brings Proof of Control to Digital Asset Transfers

Digital assets now sit inside the core of financial services. HSBC launched its Tokenized Deposit Service in ...

Manage Ingest Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Ingest Processor pipeline, deploy it to the ...