Splunk Dev

How to access Rest API via C# application?

robertpurpose
Explorer

I have a local access to Splunk on my system and I am seeking out means of accessing the API via a C# application. I noticed there was some documentation but no clear direction on data definition or additional routes to accessing the data. Could I get some help with this?

Labels (1)
Tags (2)
0 Karma

robertpurpose
Explorer

I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6  and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Is there an easier means of accessing Enterprise via username, password, and data I would like to download? I think the closest I came to this is here: https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTUM/RESTusing#Encrypt_REST_API_requests

Any help is appreciated and thank you so much so far for your patience. 

0 Karma

robertpurpose
Explorer

I am just seeing this documentation and will start reading and testing. Thank you @SanjayReddy  

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @robertpurpose 

have you already gone through the  follwing documentation     

https://github.com/splunk/splunk-sdk-csharp 

https://dev.splunk.com/enterprise/docs/devtools/csharp/sdk-csharp/

FYI 

for accessing REST API In SDK 

please use either   https://localhost:8089 OR http://localhost:8089 

0 Karma

robertpurpose
Explorer

@SanjayReddy  I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6  and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Is there an easier means of accessing Enterprise via username, password, and data I would like to download? I think the closest I came to this is here: https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTUM/RESTusing#Encrypt_REST_API_requests

Any help is appreciated and thank you so much so far for your patience. 

0 Karma
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...