Dashboards & Visualizations

Can i use REST API of Splunk itself in Splunk?

kartik13
Communicator

I am trying to make a custom dashboard as Splunk dashboard using a third party framework. I am trying to connect to splunk through REST API ,but during ajax call its giving me Request header field Access-Control-All-Headers is not allowed by Access-Control-Allow-Headers. error.My server.conf config are as follows

    [sslConfig]
sslKeysfilePassword = $1$0RQz5YVamCN2
enableSplunkdSSL = false
[general]
pass4SymmKey = $1$hlhnucAc03F2
serverName = KARTIKES-WS01

[lmpool:auto_generated_pool_download-trial]
description = auto_generated_pool_download-trial
quota = MAX
slaves = *
stack_id = download-trial

[lmpool:auto_generated_pool_forwarder]
description = auto_generated_pool_forwarder
quota = MAX
slaves = *
stack_id = forwarder

[lmpool:auto_generated_pool_free]
description = auto_generated_pool_free
quota = MAX
slaves = *
stack_id = free

[lmpool:auto_generated_pool_enterprise]
description = auto_generated_pool_enterprise
quota = MAX
slaves = *
stack_id = enterprise

[license]
active_group = Free

[httpServer]
crossOriginSharingPolicy = *
allowBasicAuth = false

[general]
listenOnIPv6 = yes

and my ajax request is

$.ajax({
                url:"http://localhost:9080/services/search/jobs/export",
                type:"POST",
                dataType:"json",

                data:JSON.stringify(somedata),
                headers:{
                "Access-Control-Allow-Origin" : "*",
                "Access-Control-Allow-Methods" : "GET,POST,PUT,DELETE,OPTIONS",
                "Access-Control-Allow-Headers": "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With"

                },
                crossDomain: true,
             contentType:"application/x-www-form-urlencoded",
                success:function(data){
                    console.log("Data is loaded" + data);
                    },
                error:function(){
                    console.log("Something went Wrong");
                }

      });

So , Can i use REST API in SPlunk itself? Any idea on this?

0 Karma
1 Solution

lguinn2
Legend

Yes, you can run REST API commands in the Splunk search UI. Here is an app that shows examples of exactly how to do it:
REST Endpoint Examples

Download the app and try it out, then look at the implementation to see how they did it!

View solution in original post

jaredlaney
Contributor

Is the error referring to this?

"Access-Control-Allow-Headers": "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With"

where you're using Access-Control-Allow-Headers in the variable Access-Control-Allow-Headers?

kartik13
Communicator

yes it was refering to that .I found the solution RESTAPI of Spluk accepts only the Content-Type in headers with following details:

"Content-Type":"application/x-www-form-urlencoded;charset=utf-8"

0 Karma

lguinn2
Legend

Yes, you can run REST API commands in the Splunk search UI. Here is an app that shows examples of exactly how to do it:
REST Endpoint Examples

Download the app and try it out, then look at the implementation to see how they did it!

kartik13
Communicator

Thanks .. I found the solution

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...