Getting Data In

Accessing dispatch via the API

nickstone
Path Finder

Is there a way to access the dispatch directories for gathering debugs etc via the REST API?
Working in a shared environment and have limited access to CLI.

0 Karma

harsmarvania57
Ultra Champion

Hi @nickstone,

If you know the Job ID then you can use this REST API https://<server>:<mgmt_port>/services/search/jobs/<job_id>;

For example if you want to see search.log of any jobs then you can use

curl -k -u admin:pass https://<server>:<mgmt_port>/services/search/jobs/<job_id>/search.log
0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...