Web Tools Add on (TA-webtools): Curl command sends error

[suser2019]

I am using this app https://splunkbase.splunk.com/app/4146
The curl command is not picking up method=POST and always returning error 405 and

{"error":{"detail":"GET method not supported for API","message":"Method not Supported"},"status":"failure"}
I used this command

| eval header="{\"Content-Type\":\"application/json\", \"Accept\":\"application/json\"}" 
| curl method=post uri=url-rest-api user=username pass=password headerfield= header

Now I am not sure how to make a POST call to an external API from Splunk search. Every time it is being detected as GET.

[jkat54 · Accepted solution]

Please try the latest version of the app 1.2.4 which contains many bug fixes.

https://splunkbase.splunk.com/app/4146

[jkat54]

You need to edit curl.py as shown here:

https://answers.splunk.com/answers/738867/web-tools-add-on-ta-webtools-curl-command-throws-a.html

[suser2019]

I made the changes suggested in the link.. Here is what I see after this:

| curl method=post uri=<servicenow-link-incident-creation> splunkauth=false

{"error":{"message":"Method not Supported","detail":"GET method not supported for API"},"status":"failure"}

| curl method=post uri=<servicenow-link-incident-creation> splunkauth=true

{"error":{"message":"User Not Authenticated","detail":"Required to provide Auth information"},"status":"failure"}

[jkat54]

Are you trying to use my curl command to integrate with service now?

[suser2019]

yes I am .. would you foresee an issue?

[jkat54]

You should be able to do it yes, but there's an app for service now. Why not use it instead?