Archive

Looking for the correct approach in integrating our prediction platform with Splunk

New Member

Hi,
I am a beginner here. We run a prediction platform for network incidents and wish to integrate with Splunk. We will be extracting the processed logs from Splunk and showing semantics in our platform. Currently we are using Splunk REST APIs extracting data successfully. Yet, I heard of Splunk APP and Add-ons in Splunkbase which I believe is for moving data from outside to Splunk. Request your guidance in identifying whether we should go for APP/Add-on or go ahead with REST APIs only regards abhi

0 Karma
1 Solution

Builder

I believe if the API method is working properly in your environment, you can keep doing it. In additional there is a SDK method that also being used for high volume of data and one of advantages is the automation.

Check these document:
https://docs.splunk.com/Documentation/Splunk/8.0.0/Search/Exportsearchresults

SDK -> https://docs.splunk.com/Documentation/Splunk/8.0.0/Search/ExportdatausingSDKs

View solution in original post

0 Karma

Builder

I believe if the API method is working properly in your environment, you can keep doing it. In additional there is a SDK method that also being used for high volume of data and one of advantages is the automation.

Check these document:
https://docs.splunk.com/Documentation/Splunk/8.0.0/Search/Exportsearchresults

SDK -> https://docs.splunk.com/Documentation/Splunk/8.0.0/Search/ExportdatausingSDKs

View solution in original post

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!