Getting Data In

How do I configure Splunk for REST API input?

birarich
Explorer

How to configure Splunk for REST API input? Currently in "Data inputs" I cannot see REST API input type.

jacobwilkins
Communicator

What, exactly, are you wanting to do?

Are you wanting Splunk to accept HTTPS connections, and provide a REST endpoint where something can POST data?

Splunk does that without any setup required. See here: http://docs.splunk.com/Documentation/Splunk/6.2.3/RESTREF/RESTinput#receivers.2Fstream
There is also this: https://splunkbase.splunk.com/app/1901/

If you want Splunk to reach out and query some REST api, and then index the response, take a look at this:
https://splunkbase.splunk.com/app/1546/

lc3t35
New Member

"REST API Modular Input" is not yet certified for Splunk Cloud 😞
Is there a way to do it in Splunk Cloud ?

0 Karma

kmapgar
Explorer

I have this same question.

0 Karma

vgollapudi
Communicator

I was able to configure Splunk Rest API for our environment. Let me what questions you've regarding the configuration.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...