Getting Data In

How to index data using Rest API in splunk?

kiran331
Builder

HI I have a below curl command, What is the best way to ingest data into Splunk?

curl -u "abc:123" -H "X-Requested-With: Curl" -X "POST" -d "action=list&show_attributes=ALL" "https://qualysapi.qualys.com/api/2.0/fo/asset/group/"

Tags (2)
0 Karma

micahkemp
Champion

"Best" depends on many factors, but potential solutions could be:

  1. Append the results to a file monitored by a [monitor:///] stanza (and handle log rotation, etc)
  2. Create a modulear input that fetches that URL and indexes the results
  3. Scripted input
0 Karma
Get Updates on the Splunk Community!

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

A Guide To Cloud Migration Success

As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus ...