All Apps and Add-ons

TA-Webtools: How to add headers in a POST request ?

New Member

Hi there!

I am trying to use TA-Webtools for start a automation flow. To do this I need to make a POST request as below

curl -k -X POST -H "Content-type: application/json" --data '{"flowUuid":"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx","inputs":{"A1": "B1","A2":"B2"}}' "https://server:8080/xxx/rest/v2"

Using TA-Webtools I am using the search command below

<my search> | curl method=POST data="{'flowUuid':'xxxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'}" uri=https://server:8080/xx/rest/v2

This command isn't working because are missing the header "Content-type: application/json".

How can I include this?
I think that I need to edit the python scripts, but how ?

0 Karma

Explorer

I am using this app https://splunkbase.splunk.com/app/4146
The curl command is not picking up method=POST and always returning error 405 and
{"error":{"detail":"GET method not supported for API","message":"Method not Supported"},"status":"failure"}

I used this command
| eval header="{\"Content-Type\":\"application/json\", \"Accept\":\"application/json\"}"
| curl method=post uri= user= pass= headerfield= header

Now I am not sure how to make a POST call to an external API from Splunk search. Every time it is being detected as GET.

0 Karma

SplunkTrust
SplunkTrust
0 Karma

Explorer

Testing the splunk add on for service-now app..

0 Karma

Explorer

Got it working

0 Karma

SplunkTrust
SplunkTrust

See this new app that goes well beyond my curl command: https://splunkbase.splunk.com/app/4172/

0 Karma

Explorer

I was unable to make a POST using this application

0 Karma

SplunkTrust
SplunkTrust

See release version 1.1.0

I couldnt make it work in the command like you wanted

     | curl data="JSON_DATA_HERE"

I had to make use of eval function to make the JSON field that gets passed to the request

     | makeresults count=1  | eval header="{\"content-type\":\"application/json\"}" | eval data="{\"test data\":None}" | curl uri=https://localhost:8089/services user=admin pass=changme debug=true headerfield=header datafield=data

Let me know how it works for you

https://splunkbase.splunk.com/app/4146/

0 Karma

SplunkTrust
SplunkTrust

Can you let us know if this works for you?

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!