All Apps and Add-ons

Splunk real-time data input from HTML page not working

tamduong16
Contributor

I've been trying to look for a way to for Splunk to input real-time data and I come across Rest API thinking it could be a solution to my problem. But after I set it up a Rest api base on the instruction from Splunk, no data is being added to Splunk. Could anyone let me know what I did wrong here? For testing purposes, I use a Wikipedia site as an endpoint url and I did not set up any kind of handler. I just want to know if this REST api could get me any type of information from the site. The below is a picture of the rest api I set up:
alt text

0 Karma

Damien_Dallimor
Ultra Champion

Don't use the _json sourcetype. Define a custom sourcetype.

alt text

0 Karma

tamduong16
Contributor

I set a custom sourcetype but it doesn't work! Do I have to configure the source type so that it look for html content? Thanks

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...