How SPLUNK can index external application's REST A...

aritratony · ‎08-20-2019

Hi All,

We are able to successfully index REST API in SPLUNK by both ADD ON Builder and Rest Modular Input(REST_TA).
But these REST APIs are having basic authentication.

We are looking for indexing the REST API which are having token based authentication.

Can anyone of you provide any suggestion regarding this how we can achieve this in SPLUNK(ADD on Builder & REST_TA)

richgalloway · ‎08-20-2019

If you're using the add-on builder then you have custom code in a modular input. Modify that code to perform token authentication per the API's documentation.

---
If this reply helps you, Karma would be appreciated.

How SPLUNK can index external application's REST API which is having token based Authentication

Extending Splunk AI Assistant for SPL to Splunk Enterprise customers!

Developer Spotlight with Qmulos

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you a member of the Splunk Community?

How SPLUNK can index external application's REST API which is having token based Authentication

Extending Splunk AI Assistant for SPL to Splunk Enterprise customers!

Developer Spotlight with Qmulos

Leveraging Automated Threat Analysis Across the Splunk Ecosystem