Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Can you make .conf changes with the rest API?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Has anyone used the rest API to successfully edit a conf file?
I understand there are 3 methods GET, POST, DELETE.
I understand one can manipulate searches but I am unfamiliar with managing objects and configurations with the API.
Any advice or examples would be awesome.
Thank you
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@Log_wrangler,
You can edit conf with rest API
For e.g.
curl -k -u admin:pass https://localhost:8089/servicesNS/nobody/search/configs/conf-props \
-d name=myweblogs \
-d CHARSET=UTF-8 \
-d SHOULD_LINEMERGE=false
In the above, if the stanza myweblogs does not exist, then it creates a new one and if it exists, it updates it with the value you provided.
Detailed documentation is available in http://docs.splunk.com/Documentation/Splunk/latest/RESTTUT/RESTconfigurations
What goes around comes around. If it helps, hit it with Karma 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@Log_wrangler,
You can edit conf with rest API
For e.g.
curl -k -u admin:pass https://localhost:8089/servicesNS/nobody/search/configs/conf-props \
-d name=myweblogs \
-d CHARSET=UTF-8 \
-d SHOULD_LINEMERGE=false
In the above, if the stanza myweblogs does not exist, then it creates a new one and if it exists, it updates it with the value you provided.
Detailed documentation is available in http://docs.splunk.com/Documentation/Splunk/latest/RESTTUT/RESTconfigurations
What goes around comes around. If it helps, hit it with Karma 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello, did you see this?
http://docs.splunk.com/Documentation/Splunk/7.1.2/RESTREF/RESTprolog
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
A Four-Part Event Series: State of Observability - Where AI Meets Performance
Persistent Queue at TcpOut — One of Splunk's Most Practical Features
Build resilience for the agentic era: Join us at Splunk Go San Jose
