Getting Data In

How to index results from cURL?

morethanyell
Builder

Hi,

I'm at a dead end. I'm just playing around and wanting to index the JSON result of a cURL command. What do I do?

Is it possible to get the result of this cURL and have it indexed in Splunk?

Here's my working cURL.

alt text

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

One approach is to write the results of the curl commands to a file and have Splunk monitor that file. Or you could use the oneshot command to index the results file.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

gjanders
SplunkTrust
SplunkTrust

You could set this up as a scripted input as per the docs page "Setting up a scripted input", this would result in the output of the command getting indexed.

Alternatively there will likely be a SplunkBase app for this, for example the Curl Command app or the Web Tools Add-on

richgalloway
SplunkTrust
SplunkTrust

One approach is to write the results of the curl commands to a file and have Splunk monitor that file. Or you could use the oneshot command to index the results file.

---
If this reply helps you, Karma would be appreciated.

morethanyell
Builder

I used Curl Command from splunkbase and used | collect to index the result

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...