Dashboards & Visualizations

Can i use REST API of Splunk itself in Splunk?

kartik13
Communicator

I am trying to make a custom dashboard as Splunk dashboard using a third party framework. I am trying to connect to splunk through REST API ,but during ajax call its giving me Request header field Access-Control-All-Headers is not allowed by Access-Control-Allow-Headers. error.My server.conf config are as follows

    [sslConfig]
sslKeysfilePassword = $1$0RQz5YVamCN2
enableSplunkdSSL = false
[general]
pass4SymmKey = $1$hlhnucAc03F2
serverName = KARTIKES-WS01

[lmpool:auto_generated_pool_download-trial]
description = auto_generated_pool_download-trial
quota = MAX
slaves = *
stack_id = download-trial

[lmpool:auto_generated_pool_forwarder]
description = auto_generated_pool_forwarder
quota = MAX
slaves = *
stack_id = forwarder

[lmpool:auto_generated_pool_free]
description = auto_generated_pool_free
quota = MAX
slaves = *
stack_id = free

[lmpool:auto_generated_pool_enterprise]
description = auto_generated_pool_enterprise
quota = MAX
slaves = *
stack_id = enterprise

[license]
active_group = Free

[httpServer]
crossOriginSharingPolicy = *
allowBasicAuth = false

[general]
listenOnIPv6 = yes

and my ajax request is

$.ajax({
                url:"http://localhost:9080/services/search/jobs/export",
                type:"POST",
                dataType:"json",

                data:JSON.stringify(somedata),
                headers:{
                "Access-Control-Allow-Origin" : "*",
                "Access-Control-Allow-Methods" : "GET,POST,PUT,DELETE,OPTIONS",
                "Access-Control-Allow-Headers": "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With"

                },
                crossDomain: true,
             contentType:"application/x-www-form-urlencoded",
                success:function(data){
                    console.log("Data is loaded" + data);
                    },
                error:function(){
                    console.log("Something went Wrong");
                }

      });

So , Can i use REST API in SPlunk itself? Any idea on this?

0 Karma
1 Solution

lguinn2
Legend

Yes, you can run REST API commands in the Splunk search UI. Here is an app that shows examples of exactly how to do it:
REST Endpoint Examples

Download the app and try it out, then look at the implementation to see how they did it!

View solution in original post

jaredlaney
Contributor

Is the error referring to this?

"Access-Control-Allow-Headers": "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With"

where you're using Access-Control-Allow-Headers in the variable Access-Control-Allow-Headers?

kartik13
Communicator

yes it was refering to that .I found the solution RESTAPI of Spluk accepts only the Content-Type in headers with following details:

"Content-Type":"application/x-www-form-urlencoded;charset=utf-8"

0 Karma

lguinn2
Legend

Yes, you can run REST API commands in the Splunk search UI. Here is an app that shows examples of exactly how to do it:
REST Endpoint Examples

Download the app and try it out, then look at the implementation to see how they did it!

kartik13
Communicator

Thanks .. I found the solution

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...