Getting Data In

Can Splunk index json from url on a schedule

fredclown
Builder

I have a JSON feed that I would like to get into Splunk. It is not in a file, however. It is on a web server. Is it possible to set up Splunk to read a JSON feed from a URL, say every minute?

Tags (2)
0 Karma
1 Solution

fredclown
Builder

Ok, after thinking about my question again and trying different search terms I think I found the answer. I think I'm looking for a scripted input. I could set up a shell script and use curl to pull in the data.

View solution in original post

0 Karma

fredclown
Builder

Ok, after thinking about my question again and trying different search terms I think I found the answer. I think I'm looking for a scripted input. I could set up a shell script and use curl to pull in the data.

0 Karma

apurva1707
New Member

I am facing the same issue. Can you please elaborate?

0 Karma

fredclown
Builder

Yep, this was the answer.

0 Karma
Get Updates on the Splunk Community!

Enhance Your Splunk App Development: New Tools & Support

UCC FrameworkAdd-on Builder has been around for quite some time. It helps build Splunk apps faster, but it ...

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...