Getting Data In

How to index data using Rest API in splunk?

kiran331
Builder

HI I have a below curl command, What is the best way to ingest data into Splunk?

curl -u "abc:123" -H "X-Requested-With: Curl" -X "POST" -d "action=list&show_attributes=ALL" "https://qualysapi.qualys.com/api/2.0/fo/asset/group/"

Tags (2)
0 Karma

micahkemp
Champion

"Best" depends on many factors, but potential solutions could be:

  1. Append the results to a file monitored by a [monitor:///] stanza (and handle log rotation, etc)
  2. Create a modulear input that fetches that URL and indexes the results
  3. Scripted input
0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...