Getting Data In

How to index data using Rest API in splunk?

kiran331
Builder

HI I have a below curl command, What is the best way to ingest data into Splunk?

curl -u "abc:123" -H "X-Requested-With: Curl" -X "POST" -d "action=list&show_attributes=ALL" "https://qualysapi.qualys.com/api/2.0/fo/asset/group/"

Tags (2)
0 Karma

micahkemp
Champion

"Best" depends on many factors, but potential solutions could be:

  1. Append the results to a file monitored by a [monitor:///] stanza (and handle log rotation, etc)
  2. Create a modulear input that fetches that URL and indexes the results
  3. Scripted input
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...