Has anyone used the rest API to successfully edit a conf file?
I understand there are 3 methods GET, POST, DELETE.
I understand one can manipulate searches but I am unfamiliar with managing objects and configurations with the API.
Any advice or examples would be awesome.
Hello, did you see this?
You can edit conf with rest API
curl -k -u admin:pass https://localhost:8089/servicesNS/nobody/search/configs/conf-props \
-d name=myweblogs \
-d CHARSET=UTF-8 \
In the above, if the stanza myweblogs does not exist, then it creates a new one and if it exists, it updates it with the value you provided.
Detailed documentation is available in http://docs.splunk.com/Documentation/Splunk/latest/RESTTUT/RESTconfigurations
View solution in original post