Currently, we are using the Webtool TA for invoking external REST APIs. We installed the TA on our DEV box and then we performed the following SPL command:
| curl method=get verifyssl=True uri=https:///v1///itemDefinitions?view=full&limit=20 debug=t
But for some reason, the curl_message returns a ‘Connection to timed out. (connect timeout=60)’ error. We checked the internal network team and they tell us access from our test Splunk servers to the servers are open for any port. Can you suggest ways to resolve this?
@jkat54
Have you tried command line curl from the splunk server to the api?
I'm just assuming here but it sounds like the splunk server isn't able to resolve the fqdn to an IP.
If you know how to troubleshoot DNS that's your first step. Next step is to move the parameters into a datafield
| eval data="{\'view\':\'full\',\'limit\':\'20\'}" | curl ... datafield=data