Splunk Dev

How do I read logs from splunk>enterprise into my application?

raju4789
New Member

I have a user case to check how many new errors are logged into Splunk every day. I have to check with previous day logs and post only new logs. So , i want a way to read logs into my application.

Tags (1)
0 Karma

raju4789
New Member

Hi,
I know search query. I can directly go and type splunk>enterprise and get results. I want to do above from an application (say written in node js) to call splunk with search query and get the results.

Thanks

0 Karma

tomawest
Path Finder

This may seem a bit too simplistic however I would run a search across two days along the lines of

search log-level=error | stats count as "totalerrors" by errorType| search totalerrors = 1

0 Karma

raju4789
New Member

search log-level=error | stats count as "totalerrors" by errorType| search totalerrors = 1

I want to query above using my application (say node js) and get results as if I am going to splunk>enterprise site and typing it. Is it possible?

Does splunk provide API to get search query results from another application?

If yes , how?

Thanks tomawest

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...