I have a JSON feed that I would like to get into Splunk. It is not in a file, however. It is on a web server. Is it possible to set up Splunk to read a JSON feed from a URL, say every minute?
Ok, after thinking about my question again and trying different search terms I think I found the answer. I think I'm looking for a scripted input. I could set up a shell script and use curl to pull in the data.
Ok, after thinking about my question again and trying different search terms I think I found the answer. I think I'm looking for a scripted input. I could set up a shell script and use curl to pull in the data.
