When creating a work flow with a POST request everything is automatically URL encoded according to the docs.
"Splunk software automatically HTTP-form encodes variables that it passes in POST link actions via URIs. This means you can include values that have spaces between words or punctuation characters."
The endpoint I am hitting expects this data to be in JSON format. Is there anyway to change this so that the request sends application/json instead?
You could do that by setting up the proxy server which listens for application/x-www-form-urlencoded type requests and post's application/json type data.
So you direct your request to proxy server which will do post request in application/json type.
View solution in original post
does this mean without a proxy server, we cannot post a json data to the application, natively?