Getting Data In

Accessing dispatch via the API

nickstone
Path Finder

Is there a way to access the dispatch directories for gathering debugs etc via the REST API?
Working in a shared environment and have limited access to CLI.

0 Karma

harsmarvania57
Ultra Champion

Hi @nickstone,

If you know the Job ID then you can use this REST API https://<server>:<mgmt_port>/services/search/jobs/<job_id>;

For example if you want to see search.log of any jobs then you can use

curl -k -u admin:pass https://<server>:<mgmt_port>/services/search/jobs/<job_id>/search.log
0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...