Splunk Dev

How to access Rest API via C# application?

robertpurpose
Explorer

I have a local access to Splunk on my system and I am seeking out means of accessing the API via a C# application. I noticed there was some documentation but no clear direction on data definition or additional routes to accessing the data. Could I get some help with this?

Labels (1)
Tags (2)
0 Karma

robertpurpose
Explorer

I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6  and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Is there an easier means of accessing Enterprise via username, password, and data I would like to download? I think the closest I came to this is here: https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTUM/RESTusing#Encrypt_REST_API_requests

Any help is appreciated and thank you so much so far for your patience. 

0 Karma

robertpurpose
Explorer

I am just seeing this documentation and will start reading and testing. Thank you @SanjayReddy  

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @robertpurpose 

have you already gone through the  follwing documentation     

https://github.com/splunk/splunk-sdk-csharp 

https://dev.splunk.com/enterprise/docs/devtools/csharp/sdk-csharp/

FYI 

for accessing REST API In SDK 

please use either   https://localhost:8089 OR http://localhost:8089 

0 Karma

robertpurpose
Explorer

@SanjayReddy  I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6  and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Is there an easier means of accessing Enterprise via username, password, and data I would like to download? I think the closest I came to this is here: https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTUM/RESTusing#Encrypt_REST_API_requests

Any help is appreciated and thank you so much so far for your patience. 

0 Karma
Get Updates on the Splunk Community!

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...