Is it possible, and if so how, to dispatch searches in Splunk and display the results using Coldfusion. I have been looking at REST and cURL but can't quite wrap my head around getting either one to work with ColdFusion. I do not want to see ColdFusion logs I want to see search results displayed in ColdFusion pages.
if I do this
<html>
<head>
<title>Splunk Test</title>
</head>
<body>
<cfset tmp = {} />
<cfhttp url='https://localhost:8089/' username="admin" password="changeme" result="r" method="post" >
<cfhttpparam type="header" name="content-type" value="application/json" />
<cfhttpparam type="body" value="#serializeJson(tmp)#" />
</cfhttp>
<cfdump var="#r#" />
</body>
</html>
I get the following response
struct
Charset [empty string]
ErrorDetail I/O Exception: sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Could not build a validated path.
Filecontent Connection Failure
Header [empty string]
Mimetype Unable to determine MIME type of file.
Responseheader
struct [empty]
Statuscode Connection Failure. Status code unavailable.
Text YES
Is what I am trying even possible?
Yes, what you are doing is possible. The error you see is from Coldfusion trying to validate the Splunk server certificate. Is it self-signed? then you need to turn the https validation off. Check out http://dev.splunk.com/sdks and see if one of those SDKs would help.